Fortinet Gate 60D - Viewing the User Group List; Configuring a User Group

User Group User
FortiGate Version 4.0 Administration Guide
586 01-400-89802-20090424
http://docs.fortinet.com/ • Feedback
For information on configuring user groups, see “Configuring a user group” on page 586.
For information on configuring SSL VPN user group options, see “Configuring SSL VPN
identity-based firewall policies” on page 331.
Viewing the User group list
To view the User group list, go to User > User Group.
Figure 388: Example User group list
Configuring a user group
To add a new user group, go to User > User Group, select Create New, and enter or select
the following according to user group type:
Create New Add a new user group.
Group Name The name of the user group. User group names are listed by type of
user group: Firewall, Directory Service and SSL VPN. For more
information,
see “Firewall user groups” on page 584, “Directory
Service user groups” on page 585, and “SSL VPN user groups” on
page 585.
Members The Local users, RADIUS servers, LDAP servers, TACACS+ servers,
Directory Service users/user groups or PKI users found in the user
group.
Delete icon Delete the user group.
You cannot delete a user group that is included in a firewall policy, a
dialup user phase 1 configuration, or a PPTP or L2TP configuration.
Edit icon Edit the membership and options of the group.
Expand Arrow
Delete
Edit
Note: By default, the FortiGate web-based manager displays Firewall options. The
following figures show the variations that display for each of the user group types: Firewall,
Directory Service, and SSL VPN.
Note: If you try to add LDAP servers or local users to a group configured for administrator
authentication, an “Entry not found” error occurs.