Watchguard Firebox X20E, Руководство пользователя

Страница: 177 / 310

User Guide 165
Using LDAP/Active Directory Authentication
3
In the Account Name text box, type the name of the new group. This name must match the
name of a group in the LDAP directory. This name must contain only letters, numbers, and the
underscore (_)or dash (-) characters. Spaces are not permitted.
4
In the Description text box, you can enter a description of the group. This field is optional.
5
From the Administrative Access drop-down list, select the level of Firebox X Edge
administrative access to assign to the group. You can select:
- None - The members of the group have no access to Firebox X Edge administration functions.
- Read-only - The members of this group can see, but not change, Firebox X Edge
configuration and status.
- Full - The members of this group have full Firebox X Edge administrative privileges.
6
Use the Session maximum time-out text box to set the number of minutes a user session
started by a member of this group is allowed to stay active. When this limit occurs, the Firebox X
Edge will close the session.
7
Use the Session idle time-out text box to set the number of minutes a user session started by a
member of this group can stay idle before it is automatically closed by the Firebox X Edge.
8
Select the Allow access to the External Network check box to allow the members of this group
to access the external network through the Firebox X Edge.
9
Select the Allow access to manual and managed VPN tunnels check box to allow the
members of this group to access VPN tunnels using the Firebox X Edge.
10
Click Submit .
Setting a WebBlocker profile for a group
A WebBlocker profile is a unique set of restrictions you can apply to users on your network to control
access to external web sites. To apply a WebBlocker profile to the group, click the
WebBlocker tab on
the Firebox Users New Group page and select a profile from the drop-down list. You must first create
WebBlocker profiles in the
WebBlocker > Profiles area of the Firebox X Edge configuration pages. If
no profile is assigned, the users in this group have full access to all web sites. For more information on
WebBlocker profiles, see “Creating WebBlocker Profiles” on page 171.