Watchguard Firebox X1000, Руководство пользователя

Страница: 190 / 314

Chapter 10: Creating Aliases and Implementing Authentication
168 WatchGuard Firebox System
Within groups, you define users according to factors such
as the method they use to authenticate, the type of system
they use, or the information they need to access. Users can
be either networks or individual computers. As your orga-
nization changes, you can add or remove users or systems
from groups.
N
OTE
You can define only a limited number of Firebox users. If you
have more than approximately 100 users to authenticate,
WatchGuard recommends that you use a third-party
authentication server.
WatchGuard automatically adds two groups–intended for
remote users–to the basic configuration file:
ipsec_users
Add the names of authorized users of MUVPN.
pptp_users
Add the names of authorized users of RUVPN with
PPTP.
You can use Policy Manager to add, edit, or delete other
groups to or from the configuration file or to add or modify
the users within a group.
From Policy Manager:
1 Select Setup => Authentication Servers .
The Authentication Servers dialog box appears, as shown in the
following figure.