Sidewinder G2 6.1.2 Administration Guide - Glossary of Technical ...

Figure 47: User Groups
user group
named
“Accounting”
user group
named
“Engineering”
Chapter 4: Understanding Policy Configuration
Rule elements
Figure 47 shows five users divided into two user groups: “Accounting” and
“Engineering.” Suppose you want to allow both user groups Telnet access to
the Internet. Also suppose you want to authenticate the “Accounting” user
group differently from the “Engineering” user group. In this example you create
two nearly identical rules to allow Telnet access, one for each user group. The
only difference in the rules for each user group would be the authentication
method you specify for each group.
Network objects
A network object is an entity for which you configure the Sidewinder G2 to
allow or deny connections. A network object can be an IP address, a host, a
domain, a netmap, a subnet, or netgroup. When you create rules, you must
specify a network object as the source or destination of the connection. (You
may also select the All option, which serves as a wildcard.) The following
subsections provide an overview of how each network object is used.
Domain objects
internal
network
Sidewinder G2
A domain object specifies a domain name that is registered in the Domain
Name System (DNS). A domain object matches any domain or host name
within the specified domain; for example, somehost.example.com matches
example.com. See “Configuring domain objects” on page 142 for more
information.
Domain network objects are not supported in IP Filter rules.
Internet
105