Fortinet Gate 60D, Administration Manual

Page: 586 / 706

User Group User
FortiGate Version 4.0 Administration Guide
586 01-400-89802-20090424
http://docs.fortinet.com/ • Feedback
For information on configuring user groups, see “Configuring a user group” on page 586 .
For information on configuring SSL VPN user group options, see “Configuring SSL VPN
identity-based firewall policies” on page 331 .
Viewing the User group list
To view the User group list, go to User > User Group .
Figure 388: Example User group list
Configuring a user group
To add a new user group, go to User > User Group , select Create New , and enter or select
the following according to user group type:
Create New Add a new user group.
Group Name The name of the user group. User group names are listed by type of
user group: Firewall, Directory Service and SSL VPN. For more
information,
see
“Firewall user groups” on page 584 , “Directory
Service user groups” on page 585 , and “SSL VPN user groups” on
page 585 .
Members The Local users, RADIUS servers, LDAP servers, servers,
Directory Service users/user groups or PKI users found in the user
group.
Delete icon Delete the user group.
You cannot delete a user group that is included in a firewall policy, a
dialup user phase 1 configuration, or a PPTP or L2TP configuration.
Edit icon Edit the membership and options of the group.
Expand Arrow
Delete
Edit
Note: By default, the FortiGate web-based manager displays Firewall options. The
following figures show the variations that display for each of the user group types: Firewall,
Directory Service, and SSL VPN.
Note: If you try to add LDAP servers or local users to a group configured for administrator
authentication, an “Entry not found” error occurs.