35

User/Group

35.1 Overview

This chapter describes how to set up user accounts, user groups, and user settings for the ZyWALL. You can also set up rules that control when users have to log in to the ZyWALL before the ZyWALL routes traffic for them.

35.1.1What You Can Do Using The User/Group Screens

The User screen (see Section 35.2 on page 595) provides a summary of all user accounts.

The Group screen (see Section 35.3 on page 598) provides a summary of all user groups. In addition, this screen allows you to add, edit, and remove user groups. User groups may consist of access users and other user groups. You cannot put admin users in user groups

The Setting screen (see Section 35.4 on page 599) controls default settings, login settings, lockout settings, and other user settings for the ZyWALL. You can also use this screen to specify when users must log in to the ZyWALL before it routes traffic for them.

35.1.2What You Need To Know About User/Groups

User Account

A user account defines the privileges of a user logged into the ZyWALL. User accounts are used in firewall rules and application patrol, in addition to controlling access to configuration and services in the ZyWALL.

User Types

These are the types of user accounts the ZyWALL uses.

Table 190 Types of User Accounts

TYPE

ABILITIES

LOGIN METHOD(S)

Admin Users

 

 

 

 

 

Admin

Change ZyWALL configuration (web, CLI)

WWW, TELNET, SSH, FTP,

 

 

Console, Dial-in

 

 

 

Limited-Admin

Look at ZyWALL configuration (web, CLI)

WWW, TELNET, SSH, Console,

 

Perform basic diagnostics (CLI)

Dial-in

 

 

 

Access Users

 

 

 

 

 

User

Access network services

WWW, TELNET, SSH

 

Browse user-mode commands (CLI)

 

 

 

 

 

593

ZyWALL USG 100/200 Series User’s Guide