Creating Aliases And Implementing Authentication; Using Host Aliases - Watchguard Firebox FireboxTM System 4.6 User Manual

Creating Aliases and
CHAPTER 13
Implementing Authentication
Aliases are shortcuts used to identify groups of hosts, networks, or users with one
name. The use of aliases simplifies user authentication and service configuration.
User authentication provides access control for outgoing connections. Authentication
dynamically maps an individual username to a workstation IP address, allowing the
tracking of connections based on name rather than static IP address.
For more information on aliases or authentication, see the Network Security Handbook.

Using host aliases

Host aliases provide a simple way to remember host IP addresses, host ranges,
groups, usernames, and network IP addresses. They function in a similar fashion to e-
mail distribution lists–combining addresses and names into easily recognizable
groups. Use aliases to quickly build service filter rules or configure authentication.
Aliases cannot, however, be used to configure the network itself.
WatchGuard automatically adds four host aliases to the basic configuration:
firebox
trusted
optional
external
VPN Manager Guide
Addresses assigned to the three Firebox interfaces
Any host or network routed through the physical Trusted interface
Any host or network routed through the physical Optional interface
Any host or network routed through the physical External interface; in
most cases, the Internet
A host alias takes precedence over a Windows NT or RADIUS group with
the same name.
85