Is there any way to restrict user access so that when they connect via vpn (so going through the FTD) that they can only access \\myserver\share2 and not share1 for example. I know i can use a split tunnel and restrict them to the ip of myserver but that still allows them access to all the shares on the server that have default "everyone" permissions. I know access-based enumeration on the Windows side should help as well but wanted to see if anything can be done on the firewall side. I know some firewalls along you to publish shortcuts to folders so was thinking if something like that would be possible.
