We replaced our Cisco ASA with a MX provided & supported by our ISP. for multiple reasons. The ASA had 1 VPN account for our HVAC vendor that was restricted to 2 IP addresses. Now I can't seem to get anyone at our ISP to even acknowledge my requests to do this, basically telling me its my problem and restrict them thru Active Directory permissions. We are authenticating the VPN with AD, however these 2 IP addresses are PLC's and do not talk Active Directory. Mostly pleased with the MX, but not very happy that I have to tell the HVAC people they're out of luck. No way am I giving them full network access. Any Ideas?
... View more