F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices Access Control Configuration Guide-6PW100

196
• SSL VPN users—Users who access through SSL VPN.
The following matrixes show the user types and hardware compatibility:
Hardware DVPN user com
p
atible
F1000-A-EI/F1000-S-EI No
F1000-E Yes
F5000 Yes
Firewall module Yes
U200-A No
U200-S No
Hardware SSL VPN user com
p
atible
F1000-A-EI/F1000-S-EI Yes
F1000-E Yes
F5000 No
Firewall module No
U200-A Yes
U200-S Yes
Hardware Portal user com
p
atible
F1000-A-EI/F1000-S-EI Yes
F1000-E Yes
F5000 No
Firewall module Yes
U200-A Yes
U200-S Yes
In addition, AAA provides the following services for login users to enhance device security:
• Command authorization—Enables the NAS to defer to the authorization server to determine
whether a command entered by a login user is permitted, and allows login users to execute only
authorized commands. For more information about command authorization, see Getting Started
Guide.
• Command accounting—Allows the accounting server to record all commands executed on the
device or all authorized commands successfully executed. For more information about command
accounting, see Getting Started Guide.
• Level switching authentication—Allows the authentication server to authenticate users who perform
privilege level switching. As long as passing level switching authentication, users can switch their
user privilege levels, without logging out and disconnecting current connections. For more
information about user privilege level switching, see Getting Started Guide.
You can configure different AAA methods for different types of users in a domain. For more information,
see "
704HConfiguring AAA methods for ISP domains."