Is there a way to filter MAC address on VPN Cisco AnyConnect client

[fghebrewoldi]

Hi,

How to configure to filter MAC address on ASA 5505 VPN Cisco AnyConnect client.

Thanks!

[Rahul Govindan]

You can use Dynamic Access Policies (DAP) and Hostscan to create policies to only allow certain MAC addresses to connect via VPN.

http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/108000-dap-deploy-guide.html#t4

You would have a create a condition under endpoint attributes to do the same. You can read more about DAP here:

http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/108000-dap-deploy-guide.html

[fghebrewoldi]

Thanks Rahul.