Fortinet v3.0 MR7 Configuring SSL VPN user groups, Available Users/Groups or Available Members

Users/peers and user groups User groups

Figure 19: User group configuration - Directory Service

Right Arrow

		Left Arrow
Expand Arrow
Name	Type or enter the name of the user group.
Type	Select the user group type:
	Firewall		Select this group in any firewall policy that
			requires Firewall authentication.
	Directory Service Select this group in any firewall policy that
			requires Directory Service authentication.
	SSL VPN		Select this group in any firewall policy with
			Action set to SSL VPN.
			Not available in Transparent mode.
Protection Profile	Available only if Type is Firewall or Directory Service.
	Select a protection profile for this user group from the list. To
	create a new protection profile, select Create New from this list.
	Enter the appropriate information and select OK.

Available Users/Groups or

Available Members*

Members

The list of Local users, RADIUS servers, LDAP servers, TACACS+ servers, Directory Service users/user groups, or PKI users that can be added to the user group. To add a member to this list, select the name and then select the Right Arrow.

* Available Members if user group type is Directory Service.

The list of Local users, RADIUS servers, LDAP servers, TACACS+ servers, Directory Service users/user groups, or PKI users that belong to the user group. To remove a member, select the name and then select the Left Arrow.

FortiGuard Web	Available only if Type is Firewall or Directory Service.
Filtering Override	Configure Web Filtering override capabilities for this group.
SSL-VPN User Group	Available only if Type is SSL VPN.
Options

Configuring SSL VPN user groups

For detailed instructions about how to configure SSL VPN web-only mode or tunnel mode operation, see the FortiGate SSL VPN User Guide.

FortiOS v3.0 MR7 User Authentication User Guide
01-30007-0347-20080828	43