topic Re: Using local user database in security rules. in General Topics

Using local user database in security rules.

ggoudr — Mon, 22 Nov 2010 08:51:26 GMT

Dear all,

Can a user defined in the local user database to be used on security policies?

What we need to deploy is that when a user authenticates via SSL VPN (using the local user database) to be able to apply security policies based on this specific username.

Regards,

George Goundras

Re: Using local user database in security rules.

bpappas — Tue, 23 Nov 2010 18:24:22 GMT

removing my last response as it was intended for a different thread.

The correct response for this thread is:

Yes you can use firewall in the manner you describe.

SSL VPN users in the local database on the firewall can be used for the "users" field in security policies.

Re: Using local user database in security rules.

rahmant — Tue, 23 Nov 2010 20:26:11 GMT

I've run into issues with using local groups in PA rules. Individual local users work fine, but when trying to use locally defined groups, I've run into problems.

I'll try to open a case with support to get it checked out.

Tariq

Re: Using local user database in security rules.

ggoudr — Mon, 29 Nov 2010 12:56:09 GMT

I know about the issues of using local user groups in these security rules. I have tried to use them but with no success. Because I did not have a specific requirement for this, i did not go further, but I know that they may not work correctly.
Defining the users one-by-one will work, but I think that they need to be also placed to the "additional users" field one by one.

George