Ip Filtering for Remote Access VPN

[Arif]

Hello;

On my Cisco ASA 5516X Firepower (FTD) device, remote Access vpn is running, but I want to set IP filtering to this. Only 1.1.1.1 external IP address should login vpn, how can I set this.

My Remote Access Configuration for remote Access are:

       Source Zones      Destination Zones        Source Network       Destination Network

1     OutboundNet       InternalNet                  VPNnetwork             InternalNetwork

2     InternalNet           OutboundNet              InternalNetwork      VPNnetwork

[Rob Ingram · Accepted solution]

Hi,

I don't think this is possible on FTD, unless you can configure a control-plane ACL via Flexconfig...this possibly isn't supported by cisco though. You could apply an ACL on the upstream router, permitting/denying the traffic accordingly. Alternatively if you were using a 2FA solution such as Duo that can restrict traffic from source.

HTH