Limit a single SSL VPN user to three servers

Question

We need to give a contractor access to his three servers behind our UTM. If we allow him to connect using the SSL VPN, how do we limit his access to the three servers?

DKKDG · Answer

Hi Steven, 
 just create an SSL-VPN profile for the specific user und put under allowed networks the three servers. Untick automatic firewall rule and create a firewall rule under network prtection where you use the user network object the threee servers and the desired ports that are needed. 
 Best Regards DKKDG

apijnappels · Answer

Or just leave the automatic firewall rule selected. It will only give access to the servers configured in it and it will also automatically disable should you disable the VPN-profile whereas a manually created rule remains enabled (unless of course you also manually disable it again).