WatchGuard Firebox System 7.0 User Guide

Configuring SecurID AuthenticationCRYPTOCard. The aliases appear in the From and Tolistboxes in the individual services’ Properties dialogboxes.On the CRYPTOCard server:1 Add the IP address of the Firebox where appropriateaccording to CRYPTOCard’s instructions.2 Take the user or group aliases from the serviceproperties listboxes and add them to the groupinformation in the CRYPTOCard configuration file.Only one group can be associated with each user.For more information, consult the CRYPTOCard serverdocumentation.Configuring SecurID AuthenticationFor SecurID authentication to work, the RADIUS andACE/Server servers must first be correctly configured. Inaddition, users must have a valid SecurID token and PINnumber. Please see the relevant documentation for theseproducts.NOTEWatchGuard does not support the third-party program SteelBelted RADIUS for use with SecurID. You should use theRADIUS program bundled with the RSA SecurID software.From Policy Manager:1 Select Setup => Authentication Servers.The Authentication Servers dialog box appears.2 Click the SecurID Server tab.You might need to use the arrow buttons in the upper-right cornerof the dialog box to bring this tab into view.User Guide 175