|
|
|
You can configure an Identity Awareness Gateway to use RADIUS Accounting to get user and computer identities directly from a RADIUS accounting client. Identity Awareness Gateway uses this information to apply access permissions to the connection.
RADIUS Accounting gets identity data from RADIUS Accounting Requests generated by the RADIUS accounting client. Identity Awareness Gateway uses the data from these requests to get user and device group information from the LDAP server. Firewall rules apply these permissions to users, computers and networks.
Item |
Description |
|---|---|
1 |
RADIUS authentication server with RADIUS Accounting client enabled. Sends RADIUS accounting request to the Identity Awareness Gateway. |
2 |
Identity Awareness Gateway configured as a RADIUS Accounting server. |
3 |
LDAP server. Sends identity data for the user to the Identity Awareness Gateway. |
4 |
Internal network resources. |
5 |
Internet. |
6 |
Remote laptops and mobile devices. |
