Watchguard Firebox X10E, Руководство пользователя

Страница: 184 / 314

Chapter 10: Creating Aliases and Implementing Authentication
162 WatchGuard Firebox System
N
OTE
Because usernames are bound to IP addresses, user
authentication is not recommended for use in an environment
with shared multiuser machines (such as Unix, Citrix, or NT
terminal servers), because only one user per shared server
can be authenticated at any one time.
The Firebox allows you to define permissions and groups
using user names rather than IP addresses. This system
allows for situations where users may use more than one
computer or IP address. Tracking activities by user rather
than IP is especially useful on networks using DHCP
where a user workstation may have several different IP
addresses over the course of a week. Authentication by
user is also useful in education environments, such as
classrooms and college computer centers where many dif-
ferent people might use the same IP address over the
course of the day. For more information on authentication,
see the following collection of FAQs:
https://support.watchguard.com/advancedfaqs/auth_main.asp
Using Aliases
Aliases provide a simple way to remember host IP
addresses, host ranges, and network IP addresses. They
function in a similar fashion to email distribution lists–
combining addresses and names into easily recognizable
groups. Use aliases to quickly build service filter rules.
Aliases cannot, however, be used to configure the network
itself.
WatchGuard automatically adds six aliases to the basic
configuration: