Is possible to exclude Token for network source IP ?

[StephaneGillier]

Hello,

Do you know if it's possible to exclude from RSA Token an authentication from specific network ip ?

For exemple a login exclude if it's coming from 192.168.2.0/24 subnet.

Thank you,

[_EricaChalfin]

Stephane Gilliers‌,

I've moved your question to the RSA SecurID Access" data-type="space space where it will be seen by the product's support engineers, other customers and partners.  Please bookmark this page and use it when you have product-specific questions.

Alternatively, from the RSA Customer Support" data-type="space‌ page, click on Ask A Question on the blue navigation bar and choose Ask A Product Related Question.  From there, scroll to RSA SecurID Access" data-type="space and click Ask A Question.  That way your question will appear in the correct space.

Regards,

Erica

[PiersB]

RSA Authentication Manager has two types of agents: Restricted and Unrestricted. Restricted agents are only available to users specifically enabled on the agent. Unrestricted agents are available to any user with a token. 

There's no such limitation based on a token, only based on a user. For restricted agents, user and agents are associated with groups and their respective associations are used to determine access control. Both the user and restricted agent must both belong to a common group or nested sub-group. Internal (AM-database) or external (LDAP) group memberships can be used to limit access of specific users to specific restricted agents.

[StephaneGillier]

Hello Piers,

Thank you for your reply, so if I understand correctly it’s not possible ?