Authenticate A Session Without Administrative Access; Create A Read-Only Administrative Account - Watchguard Firebox X15 User Manual

User and Group Management

Authenticate a session without administrative access

If you require authentication to the Edge for the user to access resources such as the external network, they
must connect to the trusted interface IP address of the Edge using HTTPS, and type a user name and password.
The default URL for the trusted interface IP address of the Edge is https://192.168.111.1. If the user's
administrative access is set to none, they do not see the System Status page. They see the Login Status page.
If you are using local authentication, you must type your name as it appears in the Firebox User list. If you use
LDAP, Active Directory, or RADIUS servers for authentication through the Firebox X Edge, you must include
the domain name. For example, if a user authenticates using the local Firebox user list, he or she types jsmith.
If the admin user authenticates with an LDAP or RADIUYS authentication server through the Edge, the
administrator must type MyCompany\jsmith.
When you authenticate with the Firebox X Edge and make an Internet connection, your user name appears in
the Active Sessions section of the Firebox Users page.
The Login Status page can be seen at any time when the user returns to the URL for the Edge. On this page,
the user can:
See how long their session has been active.
See how long they can be idle before the session times out.
Change their password.

Create a read-only administrative account

You can create a local user account with access to see Firebox X Edge e-Series configuration pages. When you
log in as a read-only administrator, you cannot:
Click the Reboot button on the System Status page.
Change the configuration mode on the External page.
Click the Reset Event Log and Sync Time with Browser Now buttons on the Logging page.
Click the Synchronize Now button on the System Time page.
Click the Regenerate IPSec Keys button on the VPN page.
Change the configuration mode on the Managed VPN page.
Launch configuration wizards from the Wizard page.
If you try to do these things, you get a message that tells you that you have read-only access and cannot
change the configuration file.
To create a read-only user account, edit the user account. Use the Administrative Access drop-down list to
select Read Only.
192 Firebox X Edge e-Series