Watchguard Firebox X15, Руководство пользователя

Страница: 166 / 266

Managing Users and Groups
152 WatchGuard Firebox X Edge
8 Select the Allow access to the External Network check box to
allow the members of this group to access the external network
through the Firebox X Edge.
9
Select the Allow access to VPN check box to allow the members
of this group to access VPN tunnels using the Firebox X Edge.
10 Click Submit .
Setting a WebBlocker profile for a user
A WebBlocker profile is a unique set of restrictions you can apply to
users on your network to control access to external Web sites. To
apply a WebBlocker profile to the group, click the
WebBlocker tab
and select a profile from the drop-down list. You must first create
WebBlocker profiles in the
WebBlocker > Profiles
area of the Edge’s
configuration pages. If no profile is assigned, the users in this group
have full access to all web sites. For more information on Web-
Blocker profiles, see “Creating WebBlocker Profiles” on page 159.
LDAP Authentication and MUVPN
Because MUVPN settings cannot be assigned at the group level, you
must create a local Firebox user account for the user and add
MUVPN settings for the user on the MUVPN. See “Using Local Fire-
box Authentication” on page 142 for more information.
Allowing Internal Hosts to Bypass User
Authentication
You can make a list of internal hosts that bypass user authentication
settings. If a host is on this list, a user at that host does not have to