The CFS policy setting is only available if the firewall is currently licensed for Premium Content Filtering Service. You can add users and edit the configuration for any user, including settings for the following:ĬFS policy - You can apply a content filtering (CFS) policy to group members. The SonicOS user interface provides a way to create local user and group accounts. This greatly simplifies the creation of matching groups, to which CFS policies can then be applied. When using the LDAP + Local Users authentication method, you can import the groups from the LDAP server into the local database on the firewall. When using the combined authentication method to use CFS policies, the local group names must be an exact match with the LDAP or RADIUS group names. To use CFS, you cannot use LDAP or RADIUS without combining that method with local authentication. To apply Content Filtering Service (CFS) policies to users, the users must be members of local groups and the CFS policies are then applied to the groups. User management: Using local users and groups for authentication Where possible, set exclusions to prevent anything that cannot be identified by SSO from triggering it.įigure 53. SSO can be used in conjunction with LDAP. SonicOS also provides Single Sign-On (SSO) capability. For networks with a large numbers of users, user authentication using LDAP or RADIUS servers can be more efficient.
User-level authentication can be performed using a local user database, LDAP, RADIUS, or a combination of a local database with either LDAP or RADIUS. Users who log into a computer on the LAN, but perform only local tasks are not authenticated by the firewall. The firewall authenticates all users as soon as they attempt to access network resources in a different zone (such as WAN, VPN, WLAN), which causes the network traffic to pass through the firewall. You can also permit only authenticated users to access VPN tunnels and send data across the encrypted connection. Configuring Multiple Administrator Supportĭell SonicWALL network security appliances provide a mechanism for user-level authentication that gives users access to the LAN from remote locations on the Internet as well as a means to enforce or bypass content filtering policies for LAN users attempting to access the Internet.
0 kommentar(er)
