The Users > Guest Accounts page lists the guest services accounts on the security appliance. In the guest services accounts, you can enable or disable individual accounts, groups of accounts, or all accounts, you can set the Auto-Prune feature for accounts, and you can add, edit, delete, and print accounts.
To view statistics on a guest account, hover your mouse over the Statistics icon in the line of the guest account. The statistics window will display the cumulative total bytes and packets sent and received for all completed sessions. Currently active sessions will not be added to the statistics until the guest user logs out.
You can add guest accounts individually or generate multiple guest accounts automatically.
Step 1
|
Under the list of accounts, click
Add Guest
.
|
Step 2
|
In the
Settings
tab of the Add Guest Account window configure:
|
–
|
Profile
: Select the Guest Profile to generate this account from.
|
–
|
Name
: Enter a name for the account or click Generate
. The generated name is the prefix in the profile and a random two or three digit number.
|
–
|
Comment
: Enter a descriptive comment.
|
–
|
Password
: Enter the user account password or click Generate
. The generated password is a random string of eight alphabetic characters.
|
–
|
Confirm
Password: If you did not generate the password, re-enter it.
|
Step 3
|
In the
Guest Services
tab, configure:
|
–
|
Enable Guest Services Privilege
: Check this for the account to be enabled upon creation.
|
–
|
Enforce login uniqueness
: Check this to allow only one instance of this account to log into the security appliance at one time. Leave it unchecked to allow multiple users to use this account at once.
|
–
|
Automatically prune account upon account expiration
: Check this to have the account removed from the database after its lifetime expires.
|
–
|
Activate account upon first login
: Check this option to begin the timing for the account expiration.
|
–
|
Account Expires
: This setting defines how long an account remains on the security appliance before the account expires. If Automatically prune account upon account
expiration
is enabled, the account is deleted when it expires. If the Automatically
prune account upon account expiration
checkbox is cleared, the account remains in the list of guest accounts with an Expired
status, allowing easy reactivation. This setting overrides the account lifetime setting in the profile.
|
–
|
Session Lifetime
: Defines how long a guest login session remains active after it has been activated. By default, activation occurs the first time a guest user logs into an account. The Session Lifetime
cannot exceed the value set in the Account Lifetime
. This setting overrides the session lifetime setting in the profile.
|
–
|
Idle Timeout
: Defines the maximum period of time when no traffic is passed on an activated guest services session. Exceeding the period defined by this setting expires the session, but the account itself remains active as long as the Account Lifetime
hasn't expired. The Idle Timeout
cannot exceed the value set in the Session Lifetime
. This setting overrides the idle timeout setting in the profile.
|
Step 4
|
Click
OK
to generate the account.
|
Step 1
|
Under the list of accounts, click
Generate
.
|
Step 2
|
In the
Settings
tab of the Generate Guest Accounts window configure:
|
–
|
Profile
: Select the Guest Profile to generate the accounts from.
|
–
|
Number of Accounts
: Enter the number of accounts to generate.
|
–
|
User Name Prefix
: Enter the prefix from which account names are generated. For example, if you enter Guest
the generated accounts will have names like “Guest 123” and “Guest 234”.
|
–
|
Comment
: Enter a descriptive comment.
|
Step 3
|
In the
Guest Services
tab, configure:
|
–
|
Enable Guest Services Privilege
: Check this for the accounts to be enabled upon creation.
|
–
|
Enforce login uniqueness
: Check this to allow only one instance of each generated account to log into the security appliance at one time. Leave it unchecked to allow multiple users to use this account at once.
|
–
|
Automatically prune account upon account expiration
: Check this to have the account removed from the database after its lifetime expires. This setting overrides the Auto-Prune setting in the guest profile, if they differ.
|
–
|
Account Expires
: This setting defines how long an account remains on the security appliance before the account expires. If Auto-Prune
is enabled here, the account is deleted when it expires. If the Auto-Prune
checkbox is cleared, the account remains in the list of guest accounts with an Expired
status, allowing easy reactivation. This setting overrides the account expires setting in the profile.
|
–
|
Session Lifetime
: Defines how long a guest login session remains active after it has been activated. By default, activation occurs the first time a guest user logs into an account. The Session Lifetime
cannot exceed the value set in the Account Lifetime
. This setting overrides the session lifetime setting in the profile.
|
–
|
Idle Timeout
: Defines the maximum period of time when no traffic is passed on an activated guest services session. Exceeding the period defined by this setting expires the session, but the account itself remains active as long as the Account Lifetime
hasn't expired. The Idle Timeout
cannot exceed the value set in the Session Lifetime
. This setting overrides the idle timeout setting in the profile.
|
Step 4
|
Click
OK
to generate the accounts.
|
You can enable or disable any number of accounts at one time. To enable one or more guest accounts:
Step 1
|
Check the box in the
Enable
column next to the name of the account you want to enable. Check the Enable
box in the table heading to enable all accounts on the page.
|
Step 2
|
Click
Accept
at the top of the page.
|
You can enable or disable auto-prune for any number of accounts at one time. When auto- prune is enabled, the account is deleted after it expires. To enable auto-prune:
Step 1
|
Check the box in the
Auto-Prune
column next to the name of the account. Check the Auto-
Prune
box in the table heading to enable it on all accounts on the page.
|
Step 2
|
Click
Accept
at the top of the page.
|
You can print a summary of a guest account. Click the print icon to launch a summary
account report page and send that page to an active printer.