WSM User Guide - WatchGuard Technologies

How User Authentication Worksvent a user from authenticating, the administrator must disable that user’s account on the authenticationserver.Using authentication from the external networkThe primary function of the authentication tool is to authenticate outgoing traffic. You can also use it torestrict incoming network traffic. When you have an account on the Firebox, you can always use externalauthentication. For example, you can type this address in your browser at home:https://IP address of Firebox external interface:4100/After you authenticate, you can use the policies that are configured for you on the Firebox.Use this procedure to let a remote user authenticate from the external network. This lets the person useresources through the Firebox.1 From Policy Manager, double-click the WatchGuard Authentication policy icon. This policyappears after you add a user or group to a policy configuration.You see a warning to be careful when you edit an automatically configured policy.2 Click the Policy tab.3 From the WG-Auth connections are drop-down list, select Allowed.4 Below the From box, click Add. Select Any from the list and click Add. Click OK.5 Below the To box, click Add. Select Firebox from the list and click Add. Click OK.Using authentication through a gateway Firebox to another FireboxTo send an authentication request through a gateway Firebox to a different Firebox, you must add a policythat allows the authentication traffic on the gateway Firebox. On the gateway Firebox, use PolicyManager to add the WatchGuard Authentication policy. This policy controls traffic on TCP port 4100.Configure the policy to allow traffic to the IP address of the destination Firebox.122 WatchGuard System Manager