Chapter 24 - User Authentication

Abstract

Without a method of providing for the authentication of users, the firewall would lack the ability to limit, who has access to administrative features or virtual private networks (VPNs). User authentication is one of the two most important aspects of the Netscreen firewall. By providing a set of strong user authentication capabilities, the Netscreen firewall helps secure the network. The Netscreen firewall also provides a balance between security and ease-of-use via the many features supported in its authentication mechanisms. User authentication on the Netscreen firewall appears confusing given to the five types of supported users, four ways to store the users—one internal, and three external—and limitations that exist only for some of the users. This chapter discusses the types of users and how they should be used. It discusses the types of authentication servers, the features that each authentication user has and what limitations one should be aware of. Finally, the chapter shows how to set up users, authentication servers, and more by using both Netscreen's WebUI and the command line interface.