Quote:
Originally Posted by MKoch  Hi again,
the external users are owning their system but I have to give them access to my LAN and I want to control which traffic is allowed and which is not.
|
I realize I may be stating the obvious here, but if it is the traffic to your LAN that you care about it, it is better controlled via "user access" rules in your firewall policy, rather than via client-side policy.
Controlling their access to the Internet and their home network while they are connected with your VPN client does require a client-side policy.
I treat external SecurClient users (vendors, contractors, suppliers, etc.) with the same level of access control that I treat those that connect via Internet VPNs. They get access rules in my firewall that control which internal resources they can reach.