Check Point L-71, Руководство администратора

Страница: 96 / 124

Appliance Configuration
Check Point 1400 Appliances Centrally Managed Administration Guide R77.20.85 | 96
Managing Users and Objects
This section describes how to set up and manage users (User Awareness, users, administrators,
and authentication servers) and network resources.
Configuring Local Users and User Groups
In the Users & Objects > Users page you can create local users and user groups. To use these
objects in the Access Policy, make sure to activate User Awareness.
User objects are used to define the different terms under which users can operate. These include:
• The time frame during which users are allowed to access the network.
•
If users can work remotely.
To add a new local user:
1. Click
New
>
Local User
.
2. Enter a
User name
,
Password
, and
Comments
(optional). You cannot use these characters
when you enter a password or shared secret: { } [ ] ` ~ | ‘ " # + \
3. For temporary or guest users, click Temporary user .
Enter the expiration date and time.
4. To give the user remote access permissions, select
Remote Access permissions
.
5. Click Apply .
The user is added to the table on the page.
To add a new local users group with remote access permissions:
1. Click
New
>
Users Group
.
2. Enter a
Group name
.
3. To give the group remote access permissions, select
Remote Access permissions
.
4. To select initial users to add to the group, click the relevant checkboxes from the user list or
click
New
to create new users.
You can see a summary of the group members above the user list.
5. To remove a user, click the X next to the user name.
6. Click
Apply
.
The group is added to the table on the page.
To automatically delete expired local users:
1. Go to Device > Advanced Settings .
2. Select
User Management
.
3. Click
Edit
.
The
User Management
window opens.
4. Click the checkbox for Automatically delete expired local users .
5. Click Apply .
Expired local users are automatically deleted every 24 hours (after midnight).