- play_arrow Overview
- play_arrow Initial Configuration
- play_arrow Generating YANG Files
- play_arrow Configuring Interfaces
- play_arrow Configuring USB Pass-Through on NFX Series Devices
- play_arrow Configuring VNFs
- play_arrow Configuring Mapping of Address and Port with Encapsulation (MAP-E)
- play_arrow Configuring High Availability
- play_arrow Configuring Service Chaining
- Service Chaining on NFX150 Devices
- Example: Configuring Service Chaining Using VLANs on NFX150 Network Services Platform
- Example: Configuring Service Chaining Using SR-IOV on NFX150 Network Services Platform
- Example: Configuring Service Chaining Using a Custom Bridge
- Example: Configuring Service Chaining for LAN-WAN Routing
- Example: Configuring Cross Connect on NFX150 Devices
- Example: Configuring Service Chaining for LAN Routing
- Example: Configuring Cross-Connect Using a Custom Bridge on NFX150 Devices
- play_arrow Monitoring and Troubleshooting
- play_arrow Configuration Statements and Operational Commands
Integrated User Firewall Support on NFX Devices
The integrated user firewall feature introduces an authentication source via integration with Microsoft Active Directory. This feature consists of the device polling the event log of the Active Directory controller to determine, by username and source IP address, who has logged in to the device. Then the username and group information are queried from the LDAP service in the Active Directory controller. Once the device has the IP address, username, and group relationship information, it generates authentication entries. With the authentication entries, the device user firewall module enforces user-based and group-based policy control over traffic.
Figure 1 illustrates a typical scenario where the integrated user firewall feature is deployed. Users in the Active Directory domain and users outside the Active Directory domain want access to the Internet through the device. The domain controller might also act as the LDAP server.
The device reads and analyzes the event log of the domain controller and generates an authentication table as an Active Directory authentication source for this feature. The user firewall is aware of any domain user on an Active Directory domain device via the Active Directory authentication source. The device administrator configures a user firewall policy that enforces the desired user-based or group-based access control.
For information on configuring the integrated user firewall on NFX Series devices, see Authentication and Integrated User Firewalls User Guide.
