Restrict VPN connection to authorized devices

[jonsonrana23]

Hi,

I'm wondering if there's a way to restrict VPN access based on MAC address of the client PC or via LDAP authentication.

Basically, we want to only allow remote users to connect with a specific laptop and not from their home PC's for instance.

Thanks in advance

[balaji.bandi]

May be use certs to validate the device against AD ? or if you posture module can also check for validate the device ? (is this works ?)

[jonsonrana23]

any solution works for me.

can you provide me with a guide?

[balaji.bandi]

Look below guide : (i take this as you using ASA)

https://community.cisco.com/t5/security-blogs/anyconnect-certificate-based-authentication/ba-p/3105546

https://www.youtube.com/watch?v=Er5toSsbM8I

[Pavan Gundu]

Hostscan module can also do that.