Restricting SSL-VPN Connection when on LAN.

Question

Is it possible to restrict a user's computer using their SSL-VPN setup to connect to the LAN when they are on the LAN? I have some staff who are not paying attention and simply closing their laptop lids and not properly disconnecting their remote SSL-VPN connections and when they come to work their SSL is automatically connecting.

This thread was automatically locked due to age.

Ian Rogers · Accepted Answer

Just disable the SSL VPN check box for LAN in the Administration > Device Access page 
 Failing that, block port 8443 in the firewall from the LAN zone. 
 The first solution is most elegant, and should be the preferred way to do it. The second option is more a sledgehammer to crack a nut, but both should work!!!