ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308 Reference Manual
7-6 Managing Users, Authentication, and Certificates
v1.0, April 2010
6. If you change local authentication, click Apply in the Domain screen to save your settings.
To delete one or more domains:
1. In the List of Domains table, select the check box to the left of the domain that you want to
delete, or click the Select All table button to select all domains. You cannot delete a default
domain.
2. Click the Delete table button.
Configuring Groups for VPN Policies
The use of groups simplifies the configuration of VPN policies when different sets of users have
different restrictions and access controls. Like the default domain of the VPN firewall, the default
group is also named geardomain. The default group geardomain is assigned to the default domain
geardomain. You cannot delete the default domain geardomain, nor its associated default group
geardomain.
When you create a new domain, a default group with the same name as the new domain is created
automatically. You cannot delete this default group either. However, when you delete the domain
with which it is associated, the default group is deleted automatically.
Creating and Deleting Groups
To create a VPN group:
1. Select Users > Groups from the menu. The Groups screen displays. Figure 7-3 on page 7-7
shows the VPN firewall’s default group—geardomain—and, as an example, several other
groups in the List of Groups table.
Note: IPsec VPN users always belong to the default domain (geardomain) and are not
assigned to groups.
Note: Groups that are defined on the User screen are used for setting SSL VPN policies.
These groups should not be confused with LAN groups that are defined on the
LAN Groups screen and that are used to simplify firewall policies. For information
about LAN groups, see “Managing Groups and Hosts (LAN Groups)” on
page 3-14.
To Next Page
Loading...
