WatchGuard Firebox System 7.0 User Guide

Configuring RADIUS Server Authentication3 To identify the host, enter both the host name and theIP address of the Windows NT network. If you don’tknow the IP address of the host, click Find IP. The IPaddress is automatically entered.When typing IP addresses, type the digits and periods insequence. Do not use the TAB or arrow key to jump past theperiods. For more information on entering IP addresses, see“Entering IP addresses” on page 43.4 If you want, select the checkbox to use local groups.Windows NT defines two types of groups: global and local. Alocal group is local to the security system in which it is created.Global groups contain user accounts from one domain groupedtogether as one group name. A global group cannot containanother global group or a local group.5 Click OK.Configuring RADIUS Server AuthenticationThe Remote Authentication Dial-In User Service (RADIUS)provides remote users with secure access to corporate networks.RADIUS is a client-server system that storesauthentication information for users, remote access servers,and VPN gateways in a central user database that isavailable to all clients. Authentication for the entire networkoccurs from one location.RADIUS prevents hackers from intercepting and respondingto authentication requests because authenticationrequests transmit an authentication key that identifies it tothe RADIUS server. Note that it is the key that is transmitted,and not a password. The key resides on the client andserver simultaneously, which is why it is often called a“shared secret.”To add or remove services accessible by RADIUS authenticatedusers, add the RADIUS user or group in the individualservice properties dialog box and the IP address of theFirebox on the RADIUS authentication server.User Guide 171