Restrict logins to host

[Nancy Johnson]

Is it possible to restrict a user to only be able to login from a specific host name or specific client MAC?  We have a remote user that we need to restrict to only login from the laptop we have provided due to security requirements for their job.  We don't want to restrict other users.

 

We are currently running VAD 1912 CU7 with latest NetScaler release.

 

Edit to add info - It's a non-domain joined PC, their public IP can change as they move around different locations.  We do have GPOs and other controls in place for printing and data copy but we need to restrict the actual login.

 

TIA for any suggestions

[CarlStalhood]

See https://support.citrix.com/article/CTX128232/how-to-configure-xendesktop-for-a-teaching-lab-or-classroom-environment

 

NetScaler Endpoint Analysis (EPA) can read the MAC address.

 

Or maybe do a DHCP reservation and use the IP address as the filter.

[Nancy Johnson]

Unfortunately, we don't have control over the remote network the person is connecting from and they can change locations so their IPs will change.

 

I'll look at EPA more closely, that may be the solution.

 

Thank you.