User details
The firewall distinguishes between end users, who connect to the internet from behind the firewall, and administrator users, who have access to firewall objects and settings. Specify policies and settings as required.
- To change a password, click Change password.
- To view internet traffic statistics, click View usage.
- To reset the internet traffic statistics and restart the user’s network traffic quota, click Reset user accounting.
Policies
Note Policies specified at the user level take precedence over those specified at the
group level.
- Group
- Group to which the user belongs. For groups imported from Active Directory, it's the mapped group for the user.
- Surfing quota
- Access based on a defined period and type. This policy can include a cycle type, hours, validity, and maximum hours.
- Access time
- Access or denial based on a defined recurring period.
- Network traffic
- Access based on bandwidth usage.
- Traffic shaping
- Access based on QoS traffic shaping policy. This policy can include a policy association, priority, and specific limits for uploading and downloading.
- Remote access
- Access to be applied to remote users through VPN.
- Clientless
- Access to be granted to users using only a browser as a client. This policy can include bookmarks or resources that clientless users are allowed to access.
Settings
Note Settings specified at the user level take precedence over
those specified at the group level.
- L2TP
- Allow access using L2TP. Optionally, specify an IP address to be leased to the user for L2TP access.
- PPTP
- Allow access using PPTP. Optionally, specify an IP address to be leased to the user for PPTP access.
- Sophos Connect client
- Allow remote access using a configured Sophos Connect client. Optionally, specify an IP address to be leased to the user for Sophos Connect access.
- Quarantine digest
- Send a list of the email messages held in the quarantine in digest form.
- Simultaneous sign-ins
- Number of concurrent sessions that will be allowed for the user. Use the value specified in the global settings or specify a value.
- MAC binding
- Require users to log on through the specified devices.
- Sign-in restriction
- Allow access from the specified nodes. You can specify no restriction (any node), named nodes, or a node range.