Select Device > Access Domain or Panorama > Access Domain to specify domains for administrator access to the firewall or Panorama. On the firewall, access domains are linked to RADIUS Vendor-Specific Attributes (VSAs) and are supported only if a RADIUS server is used for administrator authentication (see Device > Server Profiles > RADIUS). On Panorama, you can manage access domains locally or using RADIUS VSAs (see Panorama > Access Domains).
When an administrator attempts to log in to the firewall, the firewall queries the RADIUS server for the administrator’s access domain. If there is an associated domain on the RADIUS server, it is returned and the administrator is restricted to the defined virtual systems inside the named access domain on the firewall or Panorama. If RADIUS is not used, the access domain settings on this page are ignored.
Access Domain Setting Description
Name Enter a name for the access domain (up to 31 characters). The name is case-sensitive and must be unique. Use only letters, numbers, hyphens, underscores, and periods.
Virtual Systems Select virtual systems in the Available column and click Add to select them. Access Domains are only supported on firewalls that support virtual systems.

Related Documentation