Windows Directory Rule on FMC

[TerenceLockette]

Hello All,

I don't think this is possible but thought I'd ask anyway. Is there a way to configure a rule or policy on FMC version 7.2 that will allow a source network to access a specific directory on a Windows server via SMB? I know I can create a rule that will allow SMB access to that server but I'm looking to restrict that access down to a specific directory on the destination server from the firewall side. I'm not sure if this is possible so throwing it out there.

Thanks!

[ahollifield · Accepted solution]

I don't think so.  Why wouldn't you just enforce this using AD groups on the SMB side?

[Marvin Rhoads]

No, that's not possible with any version of FMC/FTD. As @ahollifield suggested, this level of access control would be something to do using AD controls.

[TerenceLockette]

Thank you gentlemen. Yes I do know this can and should be done via AD controls on the server side but was wondering if it was also possible on the firewall side for unique situations. Thanks for the responses.