Chapter 8: User Authentication
This chapter describes how NetDefendOS implements user authentication.
• Overview, page 608
• Authentication Setup, page 610
• ARP Authentication, page 633
• Customizing Authentication HTML, page 635
• Policies Requiring Authentication, page 639
• User Identity Awareness, page 641
• Multi Factor Authentication, page 650
• Radius Relay, page 652
• RADIUS Accounting, page 659
8.1. Overview
In situations where individual users connect to protected resources through the NetDefend
Firewall, the administrator will often require that each user goes through a process of
authentication before access is allowed.
This chapter deals with setting up authentication for NetDefendOS but first the general issues
involved in authentication will be examined.
Proving Identity
The aim of authentication is to have the user prove their identity so that the network
administrator can allow or deny access to resources based on that identity. Possible types of
proof could be:
A. Something the user is. Unique attributes that are different for every person, such as a
fingerprint.
B. Something the user has, such a passcard, a X.509 Digital Certificate or Public and Private Keys.
608