One seperate external Line for only one SSL VPN Power-User of many

I think this kb article enables the feature you are requesting

I think this kb article enables the feature you are requesting

Hello Douglas,

i don't think that this is going to work, as the users should not only beeing devided in their Web Browsing habbits.

Here is more the line Speed the Problem for the Power-User, with file Transfers from the VPN-Notebook to the internal file Servers. So we are talking mainly about Communication to the Company Network File Server and not web-Surfing through the Company web Proxy.

In the last week this guy actually used every single bit of the vpn-line so that other users actually preferred to NOT work from remote and drove to work for direct Access.

Thank you, anyway.

Greetings

Franz

So you meex him to connect on a different IP address.  SSL VPN only lustens for one hostname, so I think you need a secind UTM for him or else a different connection method, such as L2TP.

You could try this:  create a host file entry on his laptop which points the UTM hostname to the interface dedicated to his traffic.  As long as the file is not overwritten, you should be OK.

Then you could give him his own ip pool so you could tailor his traffic based on any mixture of IP address, username, and interface .

Hallo Franz, and welcome to the UTM Community!

Doug's suggestion will have worked for you.  If you want to block all other access to that WAN connection, you can do so with two NAT rules.  Assuming that the Interface is defined in the UTM as "Poweruser," create the following in order:

NoNAT : {Power User's home IP} -> Any -> Poweruser (Address)
DNAT : Internet IPv4 -> Any -> Poweruser (Address) : to {nonexistent IP}

See #2 in Rulz to understand this trick.

Cheers - Bob