Configuring Authentication For A Firewall Policy; Configuring Authenticated Access To The Internet - Fortinet FortiGate User Manual
User authentication
Hide thumbs
Also See for FortiGate:
- Installation manual (77 pages) ,
- Quick start manual (28 pages) ,
- Quick start manual (2 pages)
Table of Contents
Advertisement
Firewall policy authentication
Configuring authentication for a firewall policy
Configuring authenticated access to the Internet
20
Authentication is an Advanced firewall option.
To configure authentication for a firewall policy
1
Create users and one or more user groups.
For more information, see
2
Go to Firewall > Policy.
3
Select Create New and create a new policy or select Edit on an existing policy.
4
From the Action list, select ACCEPT.
5
Configure the other firewall policy parameters as appropriate.
For information about firewall policies, see the Firewall chapter of the FortiGate
Administration Guide.
6
Select Advanced.
7
Select Authentication.
8
One at a time, select user group names from the Available Groups list and select
the right-pointing arrow button to move them to the Allowed list. All members of
the groups in the Allowed list will be authenticated to use the firewall policy.
9
Select OK.
A policy for accessing the Internet is similar to a policy for accessing a specific
network, but the destination address is set to all. The destination interface is the
one that connects to the Internet service provider. For general purpose Internet
access, the Service is set to ANY.
Access to HTTP, HTTPS, FTP and Telnet sites may require access to a domain
name service. DNS requests do not trigger authentication. You must configure a
policy to permit unauthenticated access to the appropriate DNS server, and this
policy must precede the policy for Internet access.
To configure a firewall policy for access to a DNS server
1
Go to Firewall > Policy.
2
Select Create New.
3
From the Source Interface/Zone list, select the interface to which computers on
your network are connected.
4
From the Destination Interface/Zone list, select the interface that connects to the
Internet.
"Users and user groups" on page
FortiGate User Authentication Version 1 Guide
Configuring authenticated access
15.
01-28007-0233-20050825
- Quick Links:
- Introduction
Hide quick links:
Advertisement
Table of Contents
