Watchguard Firebox V10, Руководство пользователя

Страница: 380 / 477

CHAPTER 12: Creating a Remote User VPN Policy
348 Vcontroller
Controlling a remote user’s access privileges
In addition to authenticating remote users, Firebox Vclass
appliances can also be configured to assign a temporary
internal IP address to a remote user. Typically, a remote
user can be assigned to a specific user group. Each user
group can be associated with an address group, which pro-
vides a pool of IP addresses for assignment.
After a remote user has been assigned an IP address, this
address is subject to the security policies defined within
the Policy Manager. Therefore, by controlling the network
address assignment for a group of users, a network admin-
istrator can establish different levels of access privileges for
whole groups of users.
Associating an address group to a user group allows you to
control which part of the corporate networks can be
accessed by users in a particular user group. This capabil-
ity allows network administrators to set up different user
groups for different levels of remote access.
Monitoring Remote User Activity
WatchGuard recommends that you take advantage of the
Log Manager features. You can track and record remote
access connections and system use.