GFI Software

Welcome to the GFI Software community forum! For support please open a ticket from https://support.gfi.com.

Home » GFI User Forums » Kerio Control » IP Whitelisting on VPN User (Allow us to give access to users from specific IP addresses)
IP Whitelisting on VPN User [message #152105] Thu, 30 June 2022 09:54 Go to next message
tverweij is currently offline  tverweij
Messages: 32
Registered: March 2010
Location: Curacao
Because the Kerio VPN Service is hosted on one specific port, it is not possible to grant access for users from specific IP addresses; when port 4090 is reachable from an IP address you can log in as any user.

So I would like to see a setting per user where I can specify from what IP addresses this user can log in (any IP address should be the default, as it is now) - this limits the possibility for misuse of leaked or guessed VPN credentials.
The same should be available on the Kerio -> Kerio tunnels; now it's checked on a certificate, but it would be safer if the source IP address could also be validated.
Re: IP Whitelisting on VPN User [message #152432 is a reply to message #152105] Wed, 10 August 2022 09:08 Go to previous messageGo to next message
lorenserian is currently offline  lorenserian
Messages: 1
Registered: August 2022
IP whitelisting is when you grant network access only to specific IP addresses. Each employee (or approved user) shares their home IP address with the network administrator, who then enters their IP address on a "whitelist" that grants them network access.
Re: IP Whitelisting on VPN User [message #152449 is a reply to message #152432] Fri, 12 August 2022 09:54 Go to previous message
tverweij is currently offline  tverweij
Messages: 32
Registered: March 2010
Location: Curacao
But when such an IP is whitelisted, they can log in as *any* user.

And preventing *that* was my request.
Previous Topic: Slow Upload from MAC
Next Topic: Free to use IP Blocker
Goto Forum:
  


Current Time: Thu Aug 18 18:13:11 CEST 2022

Total time taken to generate the page: 0.02930 seconds