Fortinet FortiGate FortiGate-1000A Administration Manual page 209

Firewall
FortiGate-1000A/FA2 Administration Guide
Figure 89: Advanced policy options
Authentication
You must add users and a firewall protection profile to a user group before you can
select Authentication. For information about adding and configuring user groups, see
"User group" on page
Select Authentication and select one or more user groups to require users to enter a
user name and password before the firewall accepts the connection.
Figure 90: Selecting user groups for authentication
You can select Authentication for any service. Users can authenticate with the firewall
using HTTP, Telnet, or FTP. For users to be able to authenticate you must add an
HTTP, Telnet, or FTP policy that is configured for authentication. When users attempt
to connect through the firewall using this policy they are prompted to enter a firewall
username and password.
If you want users to authenticate to use other services (for example POP3 or IMAP)
you can create a service group that includes the services for which you want to
require authentication, as well as HTTP, Telnet, and FTP. Then users could
authenticate with the policy using HTTP, Telnet, or FTP before using the other service.
01-28011-0254-20051115
255.
Policy
209