Create a Group

Using a remote authentication server to manage administrative logins to services on AZTCO-FW requires a matching group to be present on both the authentication source server and on the firewall. The existing admins group could be used, but since the name is so general it may conflict with other desired permissions in G Suite.

This example uses a new group called fwadmins.

First, create the fwadmins group in G Suite and assign users to the group. The exact details will vary based on the domain and its organization.

Next, create a group on the firewall running AZTCO-FW software. This does not require local users, only a group entry. The group entry must have appropriate permissions.

To create the group on AZTCO-FW:

• Navigate to System > User Manager, Groups tab
  • Click  [Image unavailable in the source] Add to make a new group
  • Enter the Group name, in this example: fwadmins
  • Set the Scope to Remote
  • Enter a Description, such as Remote Firewall Administrators
  • Click Save

Now the group needs privileges:

• Click  [Image unavailable in the source] on the row for the newly created group
  • Click  [Image unavailable in the source] Add in the Assigned Privileges section
  • Select the desired permissions for the group, for example: WebCfg – All pages

Warning: Do not select every item in this list! Doing so will also select the User – Config: Deny Config Write privilege which will prevent users in this group from making changes to the firewall configuration.

Click Save to store the privileges