ZyWALL User's Guide

Chapter 35 User/Group
ZyWALL USG 100/200 Series User’s Guide
595
" You cannot put access users and admin users in the same user group.
" You cannot put the default admin account into any user group.
The sequence of members in a user group is not important.
User Awareness
By default, users do not have to log into the ZyWALL to use the network services it provides.
The ZyWALL automatically routes packets for everyone. If you want to restrict network
services that certain users can use via the ZyWALL, you can require them to log in to the
ZyWALL first. The ZyWALL is then ‘aware’ of the user who is logged in and you can create
‘user-aware policies’ that define what services they can use. See Section 35.4.2 on page 603
for a user-aware login example.
Forced User Authentication
Instead of making users for which user-aware policies have been configured go to the
ZyWALL Login screen manually, you can configure the ZyWALL to display the Login
screen automatically whenever it routes HTTP traffic for anyone who has not logged in yet.
" This works with HTTP traffic only. The ZyWALL does not force users to log in
before it routes other kinds of traffic.
The ZyWALL does not automatically route the request that prompted the login, however, so
users have to make this request again.
Finding Out More
• See Section 5.5.1 on page 121 for related information on these screens.
• See Section 35.5 on page 604 for some information on users who use an external
authentication server in order to log in.
35.2 User Summary Screen
The User screen provides a summary of all user accounts. To access this screen, login to the
web configurator, and click Object > User/Group.