MFA public ip exclusion list

[SIMA Srl]

The exclusion list work only for client private ip
We have hundreds of customer connecting on the same RAS so is good for us to have the public ip exclusion.

 

[Karsayor]

I really second this. As a Service Provider, the inability to filter on client public IP poses a security threat to us as we need to disable 2FA for known public IP addresses of our customers, not for their private range. If we create an exclusion for the range 192.168.1.0/24 because a customer has this on his subnet, it would allow anyone to bypass the MFA by just having the same subnet range on their computer..

 

[ChrisM74]

coming in v21.0 is the ability to capture the client Public IP and pass it to RADIUS. More will come from this feature in the future. You can find out more and access the tech preview of v21 here: https://www.parallels.com/blogs/ras/whats-new-in-parallels-ras-21-0-and-why-its-important/