External Authentication Settings

Firewall Analyzer provides two more external authentication apart from the local authentication. They are Active Directory authentication and Remote Authentication Dial-in User Service (RADIUS) authentication. If you import users from Active Directory or if you add a RADIUS server details, you will find the Options >> link besides the Login button in the Firewall Analyzer Client UI Login screen. If you click the Options >> link, Log on to field will appear below the Password field. The Log on to field will list the following options:

• Local Authentication - If the user details are available in local Firewall Analyzer server user database
• Radius Authentication - If the user details are available in RADIUS server and dummy user entry should be avilable in local Firewall Analyzer server user database
• Domain Name(s) - If the details of the user of a domain is imported from Active Directory into the local Firewall Analyzer server user database 

Enter the User Name and Password. Select one of the three options in Log on to (Local Authentication or Radius Authentication or Domain Name). Click Login button to log in to Firewall Analyzer Client UI.

Active Directory Configuration Settings

Users in the AD (Active Directory) can be imported into Firewall Analyzer server. You have to select the required OUs (Organizational Units) under the Listed domains. You can re scan the network to find domains. Login to individual servers of the domain to get the OUs listed and select the OUs as per your requirement. Use the server credentials (User Name & Password) to login to the server. For the first time, all the users will be imported into Firewall Analyzer. On subsequent or periodic imports, only the new user added to the AD will be imported.

The imported users will be added in the Firewall Analyzer server with the following constraints: Access Level as Operator and will have access to all the Firewall devices.

Procedure to configure AD settings

Click the External Authentication Settings link under the Settings tab to configure the AD user details import, periodic import, and to enable user authentication usage. On clicking the Active Directory tab, the Active Directory Configurations page opens up. In that page, you will find the following sections:

• Import users from Active Directory
• Schedule
• Authentication

Import users from Active Directory

In this section, you will find Import Users button. Click the button and Import users from Active Directory screen pops-up.

In that screen, you will find the following items:

• Domain Name combo box & Rescan Network link

Domain Name combo box will list all the available domains in the network. Besides the combo box, you will find the Rescan Network link. Clicking the link will re scan the network to find out all the available domains. Select the domain from the combo box as per requirement.

• Server Name

If you want to list the OUs of a particular server, enter the server name in the text box.

• User Name
• Password

If you want to access a server and get list of (Organizational Units) OUs, enter the user name and password of the server in the text boxes.

• Login & List OUs button

After entering the server name to be accessed and the credentials for server access, click this button to get the list of (Organizational Units) OUs.

• Cancel button

If you want to cancel the access to server and get list of OUs operation canceled, click this button.

Schedule

In this section, you will find a check box to schedule the import of users periodically from AD and a Save button.

Select the "Schedule AD import once in

every __ days" check box. Enter the periodicity of user import in days.

Click Save button to save the changes.

Authentication

In this section, you will find the status (Status: Disabled) of the AD authentication to be used for users imported from AD and Enable button.

Click Enable button to use AD authentication for the users imported from AD. On clicking the button the status will change to Enabled (Status: Enabled) and the Enable button will change to Disable.

RADIUS Server Configuration Settings

You can also leverage the RADIUS authentication for user access bypassing the local authentication provided by Firewall Analyzer.

In the RADIUS server authentication the users credentials are sent to the RADIUS server. The server checks for the user credentials and sends the authentication successful message to Firewall Analyzer server.

Note: If the user has only RADIUS server authentication, create the user in Firewall Analyzer with dummy password. On user logging in with RADIUS server authentication, the dummy password in the local server is ignored and the user credentials are sent to RADIUS server for authentication. Refer the procedure given in the Adding Users document to add a new user with dummy passowrd.

You can make Firewall Analyzer work with RADIUS server in your environment. This section explains the configurations involved in integrating RADIUS server with Firewall Analyzer.

Procedure to configure RADIUS server settings

To configure RADIUS server in Firewall Analyzer, provide the following basic details about RADIUS server and credentials to establish connection:

Click the External Authentication Settings link under the Settings tab to configure the RADIUS server configuration. On clicking the Radius Server tab, the configuration fields are displayed. In that page, you will find the following fields: