@MartinLL is onto to it. This is something you would enforce in your IDP, such as Entra ID, Duo, etc. This is exactly how I do it for our company (using Duo). We strict VPN access to company owned machines. It likes it might be possible to do this using certificates as well. You would deploy a certificate onto the machine you want to allow. And then you create an "Remote Access - VPN Posture" configuration that requires a certificate. https://documentation.meraki.com/CiscoPlusSecureConnect/Cisco__Secure_Connect_Now_Remote_Access/Remote_Access_-_Client-based_Posture This is under Secure Connect/Endpoint Posture/VPN Access.
... View more