Watchguard Firebox SSL Series, User Manual

Page: 7 / 198

Admin Guide vii
To disable Firebox SSL VPN Gateway authentication
.................................................................. 68
SafeWord PremierAccess Authorization
........................................................................................ 68
Using SafeWord for Citrix or SafeWord RemoteAccess for Authentication ...................... 68
To configure the IAS RADIUS realm ................................................................................................. 69
Using RADIUS Servers for Authentication and Authorization ............................................... 69
To configure Microsoft Internet Authentication Service for Windows 2000 Server
............... 70
To specify RADIUS server authentication ....................................................................................... 72
To configure RADIUS authorization ................................................................................................ 72
Choosing RADIUS Authentication Protocols
................................................................................. 72
Using LDAP Servers for Authentication and Authorization ................................................... 73
LDAP authentication .......................................................................................................................... 73
To configure LDAP authentication .................................................................................................. 74
LDAP Authorization .............................................................................................................................. 75
Group memberships from group objects working evaluations
................................................ 76
Group memberships from group objects non-working evaluations ........................................ 76
LDAP authorization group attribute fields .................................................................................... 76
To configure LDAP authentication
.................................................................................................. 76
To configure LDAP authorization
.................................................................................................... 77
Using certificates for secure LDAP connections ............................................................................ 78
Determining Attributes in your LDAP Directory ........................................................................... 78
Using RSA SecurID for Authentication ........................................................................................... 79
To generate a sdconf.rec file for the Firebox SSL VPN Gateway
................................................. 80
Enable RSA SecurID authentication for the Firebox SSL VPN Gateway .................................... 81
Configuring RSA Settings for a Cluster ........................................................................................... 82
Resetting the node secret
.................................................................................................................. 82
Configuring Gemalto Protiva Authentication
............................................................................... 82
Configuring NTLM Authentication and Authorization ............................................................... 83
Configuring NTLM Authorization .................................................................................................... 84
Configuring Authentication to use One-Time Passwords
........................................................... 84
Configuring Double-Source Authentication ............................................................................... 85
To create and configure a double-source authentication realm .............................................. 85
Changing Password Labels ............................................................................................................... 86
CHAPTER 6 Adding and Configuring Local Users and User Groups
................................... 87
Adding Local Users ............................................................................................................................... 87
To create a user on the Firebox SSL VPN Gateway ........................................................................ 87
To delete a user from the Firebox SSL VPN Gateway .................................................................... 88
User Group Overview ........................................................................................................................... 88
Creating User Groups ........................................................................................................................... 89
To create a local user group .............................................................................................................. 89
To remove a user group
..................................................................................................................... 89
Configuring Properties for a User Group ...................................................................................... 90
Default group properties
................................................................................................................... 90
Forcing Users to Log on Again .......................................................................................................... 90
Configuring Secure Access Client for single sign-on .................................................................... 91
Enabling domain logon scripts
........................................................................................................ 91