How to segregate SSL Managed and Unmanaged devices?

[coldplay5467_]

Hello All,

I'm trying to segregate SSL VPN Managed and Unmanaged devices to be on two seperate subnets. What's the best way of accomplishing this?

Thanks,

Coldplay5467

[NatashaW_ · Accepted solution]

Hi,

In my environment, I separated them out by:-

• Create two user roles (Managed, Un-Managed)
• Create two Host Checker policies to define which role applies to which endpoint
• Create two Access Control Policies, two Connection Profiles (apply different subnets here) under Resource Policies -> VPN Tunneling tab

Hope that helps.

Natasha

[coldplay5467_]

Hello Natasha,

I appreciate your response! Are you using the same client certificate for both Managed and Unmanaged devices?

Thanks,

Coldplay5467

[NatashaW_]

Hi,

Yes I'm using the same SSL certificate on my MAG device, for both managed and un-managed devices.

thanks

Natasha