WatchGuard Firebox System 7.0 User Guide

Chapter 10: Creating Aliases and Implementing AuthenticationNOTEBecause usernames are bound to IP addresses, userauthentication is not recommended for use in an environmentwith shared multiuser machines (such as Unix, Citrix, or NTterminal servers), because only one user per shared servercan be authenticated at any one time.The Firebox allows you to define permissions and groupsusing user names rather than IP addresses. This systemallows for situations where users may use more than onecomputer or IP address. Tracking activities by user ratherthan IP is especially useful on networks using DHCPwhere a user workstation may have several different IPaddresses over the course of a week. Authentication byuser is also useful in education environments, such asclassrooms and college computer centers where many differentpeople might use the same IP address over thecourse of the day. For more information on authentication,see the following collection of FAQs:https://support.watchguard.com/advancedfaqs/auth_main.aspUsing AliasesAliases provide a simple way to remember host IPaddresses, host ranges, and network IP addresses. Theyfunction in a similar fashion to email distribution lists–combining addresses and names into easily recognizablegroups. Use aliases to quickly build service filter rules.Aliases cannot, however, be used to configure the networkitself.WatchGuard automatically adds six aliases to the basicconfiguration:162 WatchGuard Firebox System