WatchGuard Technologies SSL VPN Benutzerhandbuch
Admin Guide
vii
To disable Firebox SSL VPN Gateway authentication
.................................................................. 68
SafeWord PremierAccess Authorization
........................................................................................ 68
Using SafeWord for Citrix or SafeWord RemoteAccess for Authentication
...................... 68
To configure the IAS RADIUS realm
................................................................................................. 69
Using RADIUS Servers for Authentication and Authorization ............................................... 69
To configure Microsoft Internet Authentication Service for Windows 2000 Server
............... 70
To specify RADIUS server authentication
....................................................................................... 72
To configure RADIUS authorization
................................................................................................ 72
Choosing RADIUS Authentication Protocols
................................................................................. 72
Using LDAP Servers for Authentication and Authorization
................................................... 73
LDAP authentication
.......................................................................................................................... 73
To configure LDAP authentication
.................................................................................................. 74
LDAP Authorization .............................................................................................................................. 75
Group memberships from group objects working evaluations
................................................ 76
Group memberships from group objects non-working evaluations
........................................ 76
LDAP authorization group attribute fields
.................................................................................... 76
To configure LDAP authentication
.................................................................................................. 76
To configure LDAP authorization
.................................................................................................... 77
Using certificates for secure LDAP connections
............................................................................ 78
Determining Attributes in your LDAP Directory
........................................................................... 78
Using RSA SecurID for Authentication ........................................................................................... 79
To generate a sdconf.rec file for the Firebox SSL VPN Gateway
................................................. 80
Enable RSA SecurID authentication for the Firebox SSL VPN Gateway
.................................... 81
Configuring RSA Settings for a Cluster
........................................................................................... 82
Resetting the node secret
.................................................................................................................. 82
Configuring Gemalto Protiva Authentication
............................................................................... 82
Configuring NTLM Authentication and Authorization
............................................................... 83
Configuring NTLM Authorization
.................................................................................................... 84
Configuring Authentication to use One-Time Passwords
........................................................... 84
Configuring Double-Source Authentication ............................................................................... 85
To create and configure a double-source authentication realm
.............................................. 85
Changing Password Labels
............................................................................................................... 86
CHAPTER 6 Adding and Configuring Local Users and User Groups
................................... 87
Adding Local Users
............................................................................................................................... 87
To create a user on the Firebox SSL VPN Gateway
........................................................................ 87
To delete a user from the Firebox SSL VPN Gateway
.................................................................... 88
User Group Overview ........................................................................................................................... 88
Creating User Groups ........................................................................................................................... 89
Creating User Groups ........................................................................................................................... 89
To create a local user group
.............................................................................................................. 89
To remove a user group
..................................................................................................................... 89
Configuring Properties for a User Group
...................................................................................... 90
Default group properties
................................................................................................................... 90
Forcing Users to Log on Again
.......................................................................................................... 90
Configuring Secure Access Client for single sign-on
.................................................................... 91
Enabling domain logon scripts
........................................................................................................ 91