Barracuda Networks SSL VPN, Руководство администратора

Страница: 56 / 124

56 Barracuda SSL VPN Administrator’s Guide
Principals define users in two forms: the singular being represented by an Account and the plural
being a collection of accounts known as a Group.
Accounts
An Account is simply a user that will access the system. This can be in the form of a standard remote
user accessing the system to carry out their work or an administrator who maintains the system and
creates users and organizes access control etc.
The only default user embedded within the Barracuda SSL VPN is the Administrator Account,
ssladmin . All other users with administrative rights are created by this user and their administrative
rights defined by their attached policies.Structured Account Network
A policy structure should be considered before creating any accounts. Categorizing accounts into
policies as ‘Administrators’ or ‘Guest’ will encourage a more structured and organized system. This
is often imperative as the user base grows.
The administrator however is not categorized as a standard user, in fact the administrator is classified
as the administrator of the system only and not as a typical user. The administrator's purpose is to
perform configurations of the appliance and from then on the super user should delegate its
responsibilities out to other users of the system through access rights (Manage System > Access
Control >Access Rights).
Groups
Groups represent the alternative type of principal. Groups offer a more convenient type for larger
enterprises with a greater user base.
Groups allow for a more structured approach to account management; allowing an administrative user
to categorize types of accounts under one heading as the diagram below shows.
Note Unsupported Database
Actions such as ‘Create’, ‘Edit’, ‘Delete’ will not be accessible if the chosen user database does not
support external modification by the Barracuda SSL VPN. To make such amendments the
administrator must access the user database directly.