Authenticating To The Edge - Watchguard Firebox X20E User Manual

In the Description field, type a description for the user. This is for your information only. A user
6
does not use this description during authentication.
In the Password field, type a password with a minimum of eight characters. Mix eight letters,
7
numbers, and symbols. Do not use a word you can find in a dictionary. For increased security use
a minimum of one special symbol, a number, and a mixture of uppercase and lowercase letters.
Type the password again in the Confirm Password field.
8
In the Administrative Access drop-down list, set the level to which your user can see and
9
change the Firebox X Edge configuration properties: None, Read-Only, or Full.
In the Session maximum timeout field, set the maximum length of time the computer can send
10
traffic to the external network or across a Branch Office VPN tunnel. If this field is set to zero (0)
minutes, there is no session timeout and the user can stay connected for any length of time.
In the Session idle timeout field, set the length of time the computer can stay authenticated
11
when it is idle (not passing any traffic to the external network, across the Branch Office VPN, or to
the Firebox X Edge itself ). A setting of zero (0) minutes means there is no idle timeout.
If you want this user to have Internet access, select the Allow access to the External Network
12
check box. You must require user authentication for this setting to have an effect.
If you want this user to have access to computers on the other side of a Branch Office VPN tunnel,
13
select the Allow access to manual and managed VPN tunnels check box. You must require
user authentication for this setting to have an effect.
If you want this user to be able to use PPTP VPN to the Edge for secure remote access, select the
14
Allow Remote Access with PPTP check box. You must also enable PPTP on the VPN > Mobile
User page for PPTP to work.
Click Submit.
15

Authenticating to the Edge

When you configure user authentication, you can choose to have users see the login dialog box auto-
matically when they open their web browser. If you do not use this setting, users must:
Open a web browser. You can use Mozilla Firefox, Microsoft Internet Explorer, or Netscape
1
Navigator. You can use other web browsers, but this is not supported. You must enable
JavaScript and allow pop-up windows from the Firebox X Edge in your web browser to
authenticate.
To connect to the System Status page, type https:// in the browser address bar, and the IP
2
address of the Firebox X Edge trusted interface.
The default URL is: https://192.168.111.1
A security dialog box appears. Accept the warning to continue.
3
Type your user name and password.
4
Authenticating a session without administrative access
If you require authentication to the Edge for the user to access resources such as the external network,
they must connect to the Edge and type a user name and password. The default URL for the Edge is
https://192.168.111.1. If the user's administrative access is set to none, they do not see the System Sta-
tus page. They see the Login Status page.
User Guide
Using Local Firebox Authentication
159