Restrict VPN access for Vendor

ksarin123_2 · ‎03-11-2009

Hi Folks -

I have a vendor that needs remote access to some of the equipment we have on our network. I want to restrict VPN access (client based) for this vendor to only those specific IP addresses.

I am thinking of doing so by specifiying only the limited IP addresses the vendor needs access to in the Access List for Split Tunneling.

Other than this restricting access through Split Tunneling access list, is there a better way of doing this?

I am using a Cisco ASA 5520.

Thanks for your help!

naveen_b81 · ‎03-11-2009

You can do it with access-list, but the best way i think would be through webvpn, which has good controls. You will by default have 2 ssl vpn client license on all ASA.