Prevent VPN user from attempting to access other servers by using RDP/SSH/TELNET

[Samer R. Saleem]

Hello Everyone,

Is it possible to prevent VPN user that has access to server X only, from using server X to initiate connections via RDP/SSH/TELNET to other servers inside network?

is this possible on Firepower? or ASA firewall?

thanks

[marce1000]

 - Once the user is logged on to server X ; that problem is transferred to policy-auth rules as to what users can do from server-X albeit implemented by fire-walling or other solutions.

M.

[Samer R. Saleem]

Can you elaborate more please?
thanks

[Marvin Rhoads · Accepted solution]

As @marce1000 was alluding, the access control would have to be applied on the remote server.

Once you have been granted access to it, the ASA (or FTD or any VPN headend) no longer has visibility into the actions of the remote user on that server.