Sidewinder G2 6.1.1 Administration Guide - Glossary of Technical ...

Figure 4-4. User Groups
user group
named
“accounting”
user group
named
“engineering”
Rule elements
Figure 4-4, shows five users divided into two user groups:
“Accounting” and “Engineering.” Suppose you want to allow both
user groups Telnet access to the Internet. Also suppose you want to
authenticate the “Accounting” user group differently from the
“Engineering” user group. In this example you create two nearly
identical rules to allow Telnet access, one for each user group. The
only difference in the rules for each user group would be the
authentication method you specify for each group.
Network objects
internal
network
Sidewinder G2
Internet
A network object is an entity for which you configure the Sidewinder
G2 to allow or deny connections. A network object can be an IP
address, a host, a network domain, a netmap, a subnet, or netgroup.
When you create rules, you must specify a network object as the
source or destination of the connection. (You may also select the All
option, which serves as a wildcard.) The following subsections
provide an overview of how each network object is used.
Note: IP Filter rules can only use IP address, subnet, and some host (localhost) network
objects.
Understanding Policy Configuration 4-9