Fortinet Gate 60D, Administration Manual

Page: 567 / 706

User Getting started - User authentication
FortiGate Version 4.0 Administration Guide
01-400-89802-20090424
567
http://docs.fortinet.com/ • Feedback
User
This section explains how to set up user accounts, user groups, and external
authentication servers. You can use these components of user authentication to control
access to network resources.
If you enable virtual domains (VDOMs) on the FortiGate unit, user authentication is
configured separately for each virtual domain. For details, see
“Using virtual domains” on
page 103 .
This section describes:
• Getting started - User authentication
• Local user accounts
• Remote
• RADIUS
• LDAP
•
• PKI
• Directory Service
• User Group
• Options
• Monitor
• NAC quarantine and the Banned User list
Getting started - User authentication
FortiGate authentication controls access by user group, but you need to complete one or
more of the following tasks prior to configuring the user groups.
• Configure local user accounts. For each user, you can choose whether the password is
verified by the FortiGate unit, by a RADIUS server, by an LDAP server, or by a
server. For more information, see
“Local user accounts” on page 568 .
• Configure IM user profiles. For IM users, you can configure user lists that either allow
or block use of network resources.FortiGate. For more information, see
“IM user
monitor list” on page 594 .
• Configure your FortiGate unit to authenticate users by using your RADIUS, LDAP, or
servers. For more information, see
“RADIUS” on page 571 , “LDAP” on
page 575 , and “” on page 578 .
• Configure access to the FortiGate unit if you use a Directory Service server for
authentication. For more information, see
“Configuring a Directory Service server” on
page 581 .
• Configure for certificate-based authentication for administrative access (HTTPS web-
based manager), IPSec, SSL-VPN, and web-based firewall authentication. For more
information, see
“PKI” on page 581 .