FortiGate Administration Guide - FirewallShop.com

User
Authentication settings
When you enable user authentication on a firewall policy, the end users using the
firewall policy will be challenged to authenticate themselves. In the case of user ID
and password authentication, end users must provide their user name and
password. In case of certificate authentication (HTTPS or HTTP redirected to
HTTPS only), you can install customized certificates on the FortiGate unit and the
end users can also have customized certificates installed on their browsers.
Otherwise, the end users will see a warning message and have to accept the
default FortiGate certificate, which the end users’ browsers may deem as invalid.
Note: When you use certificate authentication, if you do not specify any certificate when
you create the firewall policy, the global settings will be used. If you specify a certificate, the
per-policy setting will overwrite the global setting. For information about how to use
certificate authentication, see FortiGate Certificate Management User Guide.
Go to User > Authentication > Authentication to configure user authentication
global settings.
Figure 267:Authentication Settings
Authentication Settings
Authentication TImeout
Protocol Support
Certificate
Apply
Enter a number, in minutes, from 1 to 480. The default value
for Authentication Timeout is 30.
Select protocol(s) to challenge during user authentication.
• HTTP
• Redirect HTTP Challenge to a Secure Channel (HTTPS) -
if required, redirect an HTTP challenge to an HTTPS
• HTTPS
• FTP
• Telnet
If using HTTPS protocol support, select the Local certificate
from the drop-down list for user authentication. Only available
if HTTPS protocol support is selected (including redirection
from HTTP). The default is ‘self-sign’.
Apply selections for user Authentication Settings.
FortiGate Version 3.0 MR5 Administration Guide
01-30005-0203-20070830 395