http://www.dslreports.com/forum/Authenticating-LAN-clients-to-use-the-internet-27745443 en Sun, 19 May 2013 11:11:19 EDT Sun, 19 May 2013 11:11:19 EDT http://www.dslreports.com/forum/Re-Authenticating-LAN-clients-to-use-the-internet-27768781 This won't tell you anything for any encrypted (HTTPS) sites the users are visiting though.]]> http://www.dslreports.com/forum/Re-Authenticating-LAN-clients-to-use-the-internet-27768781 Wed, 28 Nov 2012 14:58:15 EDT http://www.dslreports.com/forum/Re-Authenticating-LAN-clients-to-use-the-internet-27768685
But I have two more related quick questions:

Can I configure the Zyxel to show me a log for every user about the websites they visited?

ATM we only get the IP addresses in the log. Can I configure DNS so that the website URL is shown?

Thank you again!!

TA :)
--
quod erat demonstrandum]]> http://www.dslreports.com/forum/Re-Authenticating-LAN-clients-to-use-the-internet-27768685 Wed, 28 Nov 2012 14:40:31 EDT http://www.dslreports.com/forum/Re-Authenticating-LAN-clients-to-use-the-internet-27748653
TA :)
--
quod erat demonstrandum]]> http://www.dslreports.com/forum/Re-Authenticating-LAN-clients-to-use-the-internet-27748653 Wed, 21 Nov 2012 11:40:56 EDT http://www.dslreports.com/forum/Re-Authenticating-LAN-clients-to-use-the-internet-27747193 - USG can tie in your authentication backend i.e. LDAP, MS AD, RADIUS or use it's built in user database ... look for "AAA server" and "Auth. method" in settings
- each firewall rule can be assigned to a specific user or group. so you'd create LAN-to-WAN rule that will allow pass-through traffic only for authenticated users (users have to log in to USG first in order for the rule to allow them internet access)
- alternatively you can create time schedules for the users and/or have multiple firewall rules for various users/groups
- as a result all relevant logs will be tagged with a specific username so you know who did what]]> http://www.dslreports.com/forum/Re-Authenticating-LAN-clients-to-use-the-internet-27747193 Tue, 20 Nov 2012 21:45:13 EDT http://www.dslreports.com/forum/Re-Authenticating-LAN-clients-to-use-the-internet-27745705 Link to a manual »ftp://ftp.zyxel.com/ZYWALL_USG_20W/use···_Ed1.pdf]]> http://www.dslreports.com/forum/Re-Authenticating-LAN-clients-to-use-the-internet-27745705 Tue, 20 Nov 2012 14:05:36 EDT http://www.dslreports.com/forum/Authenticating-LAN-clients-to-use-the-internet-27745443
We have a ZyWALL USG 20W at the office.

What we want to accomplish is that each user on the LAN is prompted for his/her username and/or password before being allowed to connect to the internet.

Can this be done with this ZyWALL device ?
Do we need a separate machine as authentication server ?

I have no experience in authentication services like this.

Any help is greatly appreciated!

Thank you all in advance.

TA :)
--
quod erat demonstrandum]]> http://www.dslreports.com/forum/Authenticating-LAN-clients-to-use-the-internet-27745443 Tue, 20 Nov 2012 13:15:50 EDT