ZyXEL Communications ZyWALL USG 300 User Manual page 641

User Groups
User groups may consist of user accounts or other user groups. Use user groups
when you want to create the same rule for several user accounts, instead of
creating separate rules for each one.
Note: You cannot put access users and admin users in the same user group.
Note: You cannot put the default admin account into any user group.
The sequence of members in a user group is not important.
User Awareness
By default, users do not have to log into the ZyWALL to use the network services
it provides. The ZyWALL automatically routes packets for everyone. If you want
to restrict network services that certain users can use via the ZyWALL, you can
require them to log in to the ZyWALL first. The ZyWALL is then 'aware' of the user
who is logged in and you can create 'user-aware policies' that define what services
they can use. See
Forced User Authentication
Instead of making users for which user-aware policies have been configured go to
the ZyWALL Login screen manually, you can configure the ZyWALL to display the
Login screen automatically whenever it routes HTTP traffic for anyone who has
not logged in yet.
Note: This works with HTTP traffic only. The ZyWALL does not force users to log in
before it routes other kinds of traffic.
The ZyWALL does not automatically route the request that prompted the login,
however, so users have to make this request again.
Finding Out More
• See Section 5.5.1 on page 96
• See Section 37.5 on page 654
external authentication server in order to log in.
ZyWALL USG 300 User's Guide
Section 37.4.3 on page 653
for related information on these screens.
for some information on users who use an
Chapter 37 User/Group
for a user-aware login example.
641