
Barracuda Web Filter Release 3.3
54 Chapter 4: Managing Users and Groups
Overview
The Barracuda Web Filter distinguishes between two basic classes of the users who access Web sites
and Web applications from client machines that it has been configured to protect: local users and
domain users.
You can apply filtering and blocking policies as well as exception rules to both classes of users.
You can also view the following information about both classes of users:
• Account View
•Traffic Log
• Applications Log
• Warned Activity
• Reports output
Local users are shown as anonymous until they authenticate in the Barracuda Web Filter system by
providing login information in order to proceed to a blocked or warned Web page or application.
Domain users are shown as anonymous until they become authenticated in the Barracuda Web Filter
system by providing credentials to their respective authentication service that has been integrated with
the Barracuda Web Filter. Authenticated domain users are shown by username, client IP address, and
group membership.
In some cases, you may need to create local accounts as well as enable your Barracuda Web Filter to
look up domain accounts. For example, if your regular employees have LDAP accounts but contract
employees do not, then you might need to create local accounts for the contractor employees.
About local users
Local users that you define by listing their existing usernames in the USERS/GROUPS > New Users
page. The Barracuda Web Filter authenticates these users from its local database. To apply Web
filtering policies (and exception rules to your filtering policies) to multiple local users, you can assign
local users to local groups that you define in
the USERS/GROUPS > Local Groups page.
You can also create IP subnet-based groups, locally define groups of users who access
Web sites and Web applications from client machines within specific ranges of IP
addresses. Define IP subnet-based groups of local users in the
USERS/GROUPS > IP Groups
page.
For more information, see Creating local users and groups on page 55.
About domain users
The Barracuda Web Filter can authenticate domain users using your existing authentication service.
You can integrate the Barracuda Web Filter with any of the following types authentication servers:
•LDAP
•NTLM
Doing so enables you to apply Web filtering policies and policy exceptions to your domain users
without having to re-create local accounts for these users.
For more information, see Integrating with a user authentication service on page 56.
Kommentare zu diesen Handbüchern