Dear folks,

is there a way to configure user authentication for internet access (only for browsing the web via HTTP&HTTPS)?
We want to allow internet access from behind the edges but not for the whole network only for some users. A user authentication looks like a good way but maybee there are others.

best regards
Wolfgang

Did you try to use the Hotspot feature?

Hello Ido,

yes, we tried the Hotspot Feature and it works nice. But the problem is, you can't allow only VPN traffic and the other traffic should be "protected by Hotspot Feature". You can block VPN or all. But we want to block all except the VPN traffic.

regards
Wolfgang

You can force the users to use a VPN client to be able to access the web by creating a set of rules.
Allow, Source Any Destination Any Service IPSEC.
Allow, Source Any Encrypted Destination Any Service Web Server or Any
Block, Source LAN Destination Any Service Web Server or Any.

Then allow users to connect with SecureClient from the internal network under the vpn server tab.