WatchGuard Firebox System 7.0 User Guide

Chapter 10: Creating Aliases and Implementing AuthenticationWithin groups, you define users according to factors suchas the method they use to authenticate, the type of systemthey use, or the information they need to access. Users canbe either networks or individual computers. As your organizationchanges, you can add or remove users or systemsfrom groups.NOTEYou can define only a limited number of Firebox users. If youhave more than approximately 100 users to authenticate,WatchGuard recommends that you use a third-partyauthentication server.WatchGuard automatically adds two groups–intended forremote users–to the basic configuration file:ipsec_usersAdd the names of authorized users of MUVPN.pptp_usersAdd the names of authorized users of RUVPN withPPTP.You can use Policy Manager to add, edit, or delete othergroups to or from the configuration file or to add or modifythe users within a group.From Policy Manager:1 Select Setup => Authentication Servers.The Authentication Servers dialog box appears, as shown in thefollowing figure.168 WatchGuard Firebox System