Authentication order

[stephan411]

Hallo,

it is right, that the authentication rules where checked in the rulebase after the "normal" other rules?

Thank you for your answer.

Stephan

[kva.kva]

All rules are matched in order in the Rule Base. One rule at a time.
May be you mean feature of User Authentication. In this case the authenticating security server first checks if the connection can be allowed by a rule that does not require authentication. If one exist, the user will be connected through the less-restrictive rule, bypassing the User Authentication rule.

[kva.kva]

From help

"The Importance of Rule Order for User Authentication

When defining one or more User Authentication rule for the services Telnet, FTP, HTTP, and RLOGIN, and there are other non-authentication rules that use these services, make sure the User Authentication rule is placed last among these rules."

[stephan411]

Thank you for your answers.

Did I have it understood right:
Only by the User authentication are the user rules are checked first and then the user authentication rule is chacked as last rule. That means, that the clientautehntication rule is checked by the order of the rule base (one rule after the other)?

Stephan

[stephan411]

That means also, that this rule accept any user to go to the internet without user authentication.

Source Destination Service Action
customers@any any HTTP, FTP user auth
any any any accept


Is that right?

Stephan