Fortinet v3.0 MR7 manual Configuring authentication for a firewall policy, Go to Firewall Policy

Configuring authenticated access Firewall policy authentication

The style of the authentication method varies by the authentication protocol. If you have selected HTTP, FTP or Telnet, user name and password-based authentication occurs: the FortiGate unit prompts network users to input their firewall user name and password. If you have selected HTTPS, certificate-based authentication (HTTPS or HTTP redirected to HTTPS only) occurs: you must install customized certificates on the FortiGate unit and on the browsers of network users, which the FortiGate unit matches.

Note: You can only configure user authentication for firewall policies where Action is set to Accept.

Configuring authentication for a firewall policy

Authentication is an Advanced firewall option.

Figure 23: Advanced Firewall policy options

To configure authentication for a firewall policy

1Create users and one or more Firewall user groups.

You must select Type: Firewall for the user group. For more information, see “Users/peers and user groups” on page 33.

2Go to Firewall > Policy.

3Select Create New (to create a new policy) or select the Edit icon (to edit an existing policy).

4From the Action list, select ACCEPT.

5Configure the other firewall policy parameters as appropriate.

For information about firewall policies, see the Firewall chapter of the FortiGate Administration Guide.

6Select Authentication.

FortiOS v3.0 MR7 User Authentication User Guide
01-30007-0347-20080828	49