Is there a way to block the creation of vpn connection when we are on the corporate network. Here is what I mean :
The pulse client is configure with location awareness but with allow user to override connection policy set to on.
Location awareness works but when we are on the corporate network, since we enable the option to override, we can actually start a tunnel when connected to the corp. network.
hope im clear
if you allow users to override the policy, no.
to do this, you would have to give different roles: one with VPN and one without. You may be able to do the role mapping based on custom expressions for sourceIP (for all your local/LAN-based IPs) or interface (if internally they would connect to the internal only and remote, external only)