Symantec Security 5600 Series, Security 5400 Series,Clientless VPN 4400 Series, Administration Manual

Page: 248 / 861

247 Limiting user access
Configuring user groups for internal and external authentication
Related information
For further information related to this topic, see the following:
■
“User Account Properties—VPN tab” on page 695
■
“User Account Properties—Groups tab” on page 696
■
“Adding authentication to rules” on page 276
■
“Using the Remote Access Tunnel Wizard to create Client VPN tunnels” on page 389
■
“Manually configuring a Client VPN tunnel” on page 394
■
“Using roles to assign rules to users” on page 424
Ensuring that the internal server is enabled
The internal authentication server is created and enabled by default. If you have problems
authenticating users created on the internal server, you can verify that it is enabled.
Prerequisites
None.
To ensure that the internal server is enabled
1 In the SGMI, in the left pane, under Assets, click Authentication Servers .
2 In the right pane, on the Authentication Servers tab, select the Internal server and then click
Properties .
3 In the Internal Properties dialog box, on the General tab, ensure that the Enable check box is
checked.
4
Click OK .
5 Optionally, do one of the following:
■
To save your configuration now and activate later, on the toolbar, click Save .
■
To activate your changes now, on the toolbar, click Activate .
When prompted to save your changes, click Yes .
Related information
For further information related to this topic, see the following:
■
“Internal Properties—General tab” on page 686
Configuring user groups for internal and external
authentication
User groups simplify the authentication of multiple users by letting you define a single set of
authentication criteria that applies to all users in the group.
After you create a user group, you can use it in the following situations:
■
To enforce authentication in a rule
■
To control access for a clientless VPN role
■
As a remote endpoint in a Client VPN tunnel