Configure Local Database Authentication
You can configure a user database that is
local to the firewall to authenticate administrators who access
the firewall web interface and to authenticate end users who access
applications through Captive Portal or GlobalProtect. Perform the
following steps to configure Local
Authentication with a local database.
External
Authentication Services are usually preferable to local authentication
because they provide the benefit of central account management.
- Add the user
account to the local database.
- Select DeviceLocal User DatabaseUsers and click Add.
- Enter a user Name for the administrator.
- Enter a Password and Confirm Password or enter a Password Hash.
- Enable the account (enabled by default) and click OK.
- Add the user
group to the local database.Required if your users require group membership.
- Select DeviceLocal User DatabaseUser Groups and click Add.
- Enter a Name to identify the group.
- Add each user who is a member of the group and click OK.
- Configure
an authentication profile.The authentication profile defines authentication settings that are common to a set of users. Set the authentication Type to Local Database.
- Assign the authentication profile to an administrator
account or to an Authentication policy rule for end users.
- Administrators—Configure
a Firewall Administrator Account:Specify the Name of a user you defined earlier in this procedure.Assign the Authentication Profile that you configured for the account.
- End users—For the full procedure to configure authentication for end users, see Configure Authentication Policy.
- Administrators—Configure
a Firewall Administrator Account:
- Verify that the firewall can Test Authentication Server Connectivity to authenticate users.
Related Documentation
Configure Local or External Authentication for Firewall Adm...
Configure Local or External Authentication for Firewall Administrators You can use Local Authentication and External Authentication Services to authenticate administrators who access the firewall. These ...
Configure a Firewall Administrator Account
Configure a Firewall Administrator Account Administrative accounts specify roles and authentication methods for firewall administrators. The service that you use to assign roles and perform ...
Device > Local User Database > Users
Device > Local User Database > Users You can set up a local database on the firewall to store authentication information for firewall administrators , ...
Configure an Authentication Profile and Sequence
Configure an Authentication Profile and Sequence An authentication profile defines the authentication service that validates the login credentials of administrators who access the firewall web ...
Local Authentication
Local Authentication Although the firewall and Panorama provide local authentication for administrators and end users, External Authentication Services are preferable in most cases because they ...
Configure Authentication Policy
Configure Authentication Policy Perform the following steps to configure Authentication policy for end users who access services through Captive Portal. Before starting, ensure that your ...
Authentication
Authentication Authentication is a method for protecting services and applications by verifying the identities of users so that only legitimate users have access. Several firewall ...
Configure the Portal to Authenticate Satellites
Configure the Portal to Authenticate Satellites In order to register with the LSVPN, each satellite must establish an SSL/TLS connection with the portal. After establishing ...