Users_guestUserObjView

Users > Guest Accounts

The Users > Guest Accounts page lists the guest services accounts on the security appliance. In the guest services accounts, you can enable or disable individual accounts, groups of accounts, or all accounts, you can set the Auto-Prune feature for accounts, and you can add, edit, delete, and print accounts.

Viewing Guest Account Statistics

To view statistics on a guest account, hover your mouse over the Statistics icon in the line of the guest account. The statistics window will display the cumulative total bytes and packets sent and received for all completed sessions. Currently active sessions will not be added to the statistics until the guest user logs out.

Adding Guest Accounts

You can add guest accounts individually or generate multiple guest accounts automatically.

To Add an Individual Account:

Step 1

Under the list of accounts, click Add Guest .

Step 2

In the Settings tab of the Add Guest Account window configure:

–

Profile : Select the Guest Profile to generate this account from.

–

Name : Enter a name for the account or click Generate . The generated name is the prefix in the profile and a random two or three digit number.

–

Comment : Enter a descriptive comment.

–

Password : Enter the user account password or click Generate . The generated password is a random string of eight alphabetic characters.

–

Confirm Password: If you did not generate the password, re-enter it.

Note

Make a note of the password. Otherwise you will have to reset it.

Step 3

In the Guest Services tab, configure:

–

Enable Guest Services Privilege : Check this for the account to be enabled upon creation.

–

Enforce login uniqueness : Check this to allow only one instance of this account to log into the security appliance at one time. Leave it unchecked to allow multiple users to use this account at once.

–

Automatically prune account upon account expiration : Check this to have the account removed from the database after its lifetime expires.

–

Activate account upon first login : Check this option to begin the timing for the account expiration.

–

Account Expires : This setting defines how long an account remains on the security appliance before the account expires. If Automatically prune account upon account expiration is enabled, the account is deleted when it expires. If the Automatically prune account upon account expiration checkbox is cleared, the account remains in the list of guest accounts with an Expired status, allowing easy reactivation. This setting overrides the account lifetime setting in the profile.

–

Session Lifetime : Defines how long a guest login session remains active after it has been activated. By default, activation occurs the first time a guest user logs into an account. The Session Lifetime cannot exceed the value set in the Account Lifetime . This setting overrides the session lifetime setting in the profile.

–

Idle Timeout : Defines the maximum period of time when no traffic is passed on an activated guest services session. Exceeding the period defined by this setting expires the session, but the account itself remains active as long as the Account Lifetime hasn't expired. The Idle Timeout cannot exceed the value set in the Session Lifetime . This setting overrides the idle timeout setting in the profile.

Step 4

Click OK to generate the account.

To Generate Multiple Accounts

Step 1

Under the list of accounts, click Generate .

Step 2

In the Settings tab of the Generate Guest Accounts window configure:

–

Profile : Select the Guest Profile to generate the accounts from.

–

Number of Accounts : Enter the number of accounts to generate.

–

User Name Prefix : Enter the prefix from which account names are generated. For example, if you enter Guest the generated accounts will have names like “Guest 123” and “Guest 234”.

–

Comment : Enter a descriptive comment.

Step 3

In the Guest Services tab, configure:

–

Enable Guest Services Privilege : Check this for the accounts to be enabled upon creation.

–

Enforce login uniqueness : Check this to allow only one instance of each generated account to log into the security appliance at one time. Leave it unchecked to allow multiple users to use this account at once.

–

Automatically prune account upon account expiration : Check this to have the account removed from the database after its lifetime expires. This setting overrides the Auto-Prune setting in the guest profile, if they differ.

–

Account Expires : This setting defines how long an account remains on the security appliance before the account expires. If Auto-Prune is enabled here, the account is deleted when it expires. If the Auto-Prune checkbox is cleared, the account remains in the list of guest accounts with an Expired status, allowing easy reactivation. This setting overrides the account expires setting in the profile.

–

Session Lifetime : Defines how long a guest login session remains active after it has been activated. By default, activation occurs the first time a guest user logs into an account. The Session Lifetime cannot exceed the value set in the Account Lifetime . This setting overrides the session lifetime setting in the profile.

–

Idle Timeout : Defines the maximum period of time when no traffic is passed on an activated guest services session. Exceeding the period defined by this setting expires the session, but the account itself remains active as long as the Account Lifetime hasn't expired. The Idle Timeout cannot exceed the value set in the Session Lifetime . This setting overrides the idle timeout setting in the profile.

Step 4

Click OK to generate the accounts.

Enabling Guest Accounts

You can enable or disable any number of accounts at one time. To enable one or more guest accounts:

Step 1

Check the box in the Enable column next to the name of the account you want to enable. Check the Enable box in the table heading to enable all accounts on the page.

Step 2

Click Accept at the top of the page.

Enabling Auto-prune for Guest Accounts

You can enable or disable auto-prune for any number of accounts at one time. When auto- prune is enabled, the account is deleted after it expires. To enable auto-prune:

Step 1

Check the box in the Auto-Prune column next to the name of the account. Check the Auto- Prune box in the table heading to enable it on all accounts on the page.

Step 2

Click Accept at the top of the page.

Printing Account Details.

You can print a summary of a guest account. Click the print icon to launch a summary account report page and send that page to an active printer.