User Management Settings - Firewall Analyzer

• Users
• RADIUS Server Settings

Users

Add Users

Click the User Management > Users link to create and manage the different users who are allowed to access the Firewall Analyzer server.

The different types of users and their respective privileges are described in the table below:

By default, an Administrator user with username as admin and password as admin.

If you have logged in as an Administrator user, the User Management page lists all the users created so far.

Viewing Login Details

If you have logged in as an Administrator user, click the User Audit View link against a user to view the corresponding user audits. The User Audit page shows the remote host IP address from which the user logged on, the timestamp of the login, and the duration of the session.

The description the user details available in the user list table are explained below:

Delete 

Select all users check box if you want to delete all the users and individual user(s) check boxes to delete the selected users. There is a check box against each user below the all user check box. Click Delete button to delete all the or selected user(s) from the list of users accessing Firewall Analyzer.

Adding a New User

• Click the Add User link to add another user to access Firewall Analyzer.
• Configure User Details screen opens up.
• In the User Details section of the screen, select the role of the user from the Role drop box: Administrator or Operator
• Select the role of the user type from the User Type drop box: Local Authentication or RADIUS Authentication
• Enter e-mail address of the user in the Email ID text box
• Select the photo of the user to add
• Enter phone number of the user in the Phone Number text box
• Enter mobile number of the user in the Mobile Number text box
• Enter the user's password in the Password text box. The password should be of 5 to 20 characters long.
• Re-enter the user's password in the Re-type Password text box.
• Select time zone for NetFlow reports from the Time Zone drop box
• Click Next and go to the Scope section of the screen
•  Select the firewall devices to which the user will have access and push them from Available devices to Selected devices
• Click Save to add this user to the list of users accessing Firewall Analyzer. Click Cancel to cancel the adding user operation. Click Back to go to the User Details section.

Editing User Details

If you have logged in as an Administrator user, the User Management page lists all the users created so far.

• Click the Edit link to edit the user details. You can change the access level, password, and optionally, the default e-mail address for this user.
• You can edit the host groups associated with the user. Select the host group to which the user will be having access. All the available host groups are listed in the Available HostGroup(s) list. Select the host groups and click right arrow. The selected host groups are displayed in the Selected HostGroup(s) list. If you want to remove any host group from the Selected HostGroup(s) list, select the host groups and click left arrow. The removed host groups will be listed back in the Available HostGroup(s) list.
• Once you are done, click OK to save the new changes. Click Cancel to cancel editing the user operation.

OR

If you have logged in as an Operator or Guest user, click on the Account Settings link to change your password and default e-mail address.

Once you are done, click OK to save the new changes. Click Cancel to cancel editing the user operation.

Firewall Analyzer User Privileges 

Types of User Privileges in Firewall Analyzer

• Administrator - Can perform Add/Edit/Delete operations of all product configurations and Firewalls.
• Operator - Can perform Add/Edit/Delete operations of the Firewalls assigned to him and product configurations except Intranet Settings and User Management.

Comparison of Feature Access to the Users

RADIUS Server Settings

Firewall Analyzer provides one more external authentication apart from the local authentication. It is Remote Authentication Dial-in User Service (RADIUS) authentication. If you you add a RADIUS server details, you will find the Log on to field below the Password field in the Firewall Analyzer Client UI Login screen. The Log on to field will list the following options:

• Local Authentication - If the user details are available in local Firewall Analyzer server user database
• Radius Authentication - If the user details are available in RADIUS server and dummy user entry should be available in local Firewall Analyzer server user database

Enter the User Name and Password. Select one of the two options in Log on to (Local Authentication or Radius Authentication). Click Login button to log in to Firewall Analyzer Client UI.

RADIUS Server Configuration Settings

You can also leverage the RADIUS authentication for user access bypassing the local authentication provided by Firewall Analyzer. In the RADIUS server authentication the users credentials are sent to the RADIUS server. The server checks for the user credentials and sends the authentication successful message to Firewall Analyzer server. 

You can make Firewall Analyzer work with RADIUS server in your environment. This section explains the configurations involved in integrating RADIUS server with Firewall Analyzer.

Procedure to configure RADIUS server settings

To configure RADIUS server in Firewall Analyzer, provide the following basic details about RADIUS server and credentials to establish connection:

Click the RADIUS Server Settings link under the Settings > User Management tab to configure the RADIUS server configuration. On clicking the RADIUS Server Settings  tab, the configuration fields are displayed. In that page, you will find the following fields: