Sidewinder G2 6.1.2 Administration Guide - Glossary of Technical ...

Chapter 4: Understanding Policy Configuration
Rule elements
104
• If you want to control access based on netgroups, make a list defining all
your machines, and organize the list by the networking services they will be
granted.
• Create a proxy rule for each user group and/or netgroup.
Important: Creating netgroups saves you the trouble of entering multiple
versions of the same proxy rule. It is important to model (define) all network
objects for which you want to allow access before you set up your rules.
Users and user groups
Users are people who use the networking services provided by the Sidewinder
G2. User accounts are a mechanism used to authenticate people before they
are permitted to make a network connection through (or to) the Sidewinder G2.
Note: Users and user groups are used only in proxy rules.
As described in the following chapter, you can use the Admin Console to
create user accounts which are stored in a user database located on the
Sidewinder G2 or in a separate authentication server. A single account in a
user database includes information such as the user’s login name and
password. (“Supported authentication methods” on page 277 provides detailed
information on various methods used to authenticate users during a
Sidewinder G2 connection attempt.)
A user group is a logical grouping of one or more users, identified by a single
name. Also, a user group can include another “nested” user group. Figure 47
shows an example of two user groups.
Important: User groups can be used in an allow rule only if the specified service
supports authentication (login, Telnet, FTP, Web, secure shell [SSH], or SSO).