VPN access user authentication

Hello@Amedcary,

Glad to answer your questions.

Network access user authentication and VPN access user authentication share user data. The FW also checks user attributes (such as user status and account expiration time) during VPN access user authentication.

The local authentication and server authentication processes are the same. Users are authenticated based on the authentication domain. However, the authentication triggering modes are different.

Network access user authentication: determines the data flows to be authenticated based on an authentication policy. The FW implements Portal authentication for the data flows matching the authentication policy.

VPN user: The existing mode for triggering VPN access authentication is used. For example, SSL VPN uses the virtual gateway page to authenticate users.

To configure user-specific security policies and bandwidth policies for VPN access users, specify access control types using the service-type command, VPN access authentication, and online behavior management. In addition, you need to configure authentication policies for private IP addresses after VPN decapsulation.

After passing authentication, VPN access users exist in the online user list. User-specific policy control can be implemented only for the users in the online user list.

Glad to help you! Any further questions, let us know.