ZyXEL Communications ZYWALL USG 2000 Manual page 615

See Setting up User Attributes in an External Server on page 626
attributes and how to set up the attributes in an external server.
User Groups
User groups may consist of user accounts or other user groups. Use user groups
when you want to create the same rule for several user accounts, instead of
creating separate rules for each one.
Note: You cannot put access users and admin users in the same user group.
Note: You cannot put the default admin account into any user group.
The sequence of members in a user group is not important.
User Awareness
By default, users do not have to log into the ZyWALL to use the network services it
provides. The ZyWALL automatically routes packets for everyone. If you want to
restrict network services that certain users can use via the ZyWALL, you can
require them to log in to the ZyWALL first. The ZyWALL is then 'aware' of the user
who is logged in and you can create 'user-aware policies' that define what services
they can use. See
Forced User Authentication
Instead of making users for which user-aware policies have been configured go to
the ZyWALL Login screen manually, you can configure the ZyWALL to display the
Login screen automatically whenever it routes HTTP traffic for anyone who has
not logged in yet.
Note: This works with HTTP traffic only. The ZyWALL does not force users to log in
before it routes other kinds of traffic.
The ZyWALL does not automatically route the request that prompted the login,
however, so users have to make this request again.
Finding Out More
• See Section 5.5.1 on page 116
• See Section 36.5 on page 626
external authentication server in order to log in.
ZyWALL USG 2000 User's Guide
Section 36.4.2 on page 625
for related information on these screens.
for some information on users who use an
Chapter 36 User/Group
for a list of
for a user-aware login example.
615