Chapter 35 User/Group

"

"

You cannot put access users and admin users in the same user group.

You cannot put the default admin account into any user group.

The sequence of members in a user group is not important.

User Awareness

By default, users do not have to log into the ZyWALL to use the network services it provides. The ZyWALL automatically routes packets for everyone. If you want to restrict network services that certain users can use via the ZyWALL, you can require them to log in to the ZyWALL first. The ZyWALL is then ‘aware’ of the user who is logged in and you can create ‘user-aware policies’ that define what services they can use. See Section 35.4.2 on page 603 for a user-aware login example.

Forced User Authentication

Instead of making users for which user-aware policies have been configured go to the ZyWALL Login screen manually, you can configure the ZyWALL to display the Login screen automatically whenever it routes HTTP traffic for anyone who has not logged in yet.

"This works with HTTP traffic only. The ZyWALL does not force users to log in before it routes other kinds of traffic.

The ZyWALL does not automatically route the request that prompted the login, however, so users have to make this request again.

Finding Out More

•See Section 5.5.1 on page 121 for related information on these screens.

•See Section 35.5 on page 604 for some information on users who use an external authentication server in order to log in.

35.2User Summary Screen

The User screen provides a summary of all user accounts. To access this screen, login to the web configurator, and click Object > User/Group.

 

595

ZyWALL USG 100/200 Series User’s Guide