Assumed User Confusion???

[mcb]

I am running a NAT / proxy hybrid. I have been reading up on the Assumed User configuration. I understand that they cannot be assumed by name unless it is a DHCP client.

I have tried to set up Assumed Users with several users linking them to their static IP's. I first created a Wingate user to link them to. I also found in a forum article to go to Policies and set a policy for everyone where "user may be assumed".

OK...did this. But nothing seems to be linked up. None of the users i created appear in the activity pane as being assumed. And the users i linked do not populate any stats. What is the purpose of doing this? My thinking was if i could now track the users, i could then impose policies on them without formal authentication.

Question 2

In Policies there is a "Default Rights (System Policies) tab. What are the implications of this on policies?

Long question short, how do I use Assumed Users to make my network more secure.

Thanks,

[Nev]

I am running a NAT / proxy hybrid. I have been reading up on the Assumed User configuration. I understand that they cannot be assumed by name unless it is a DHCP client.

I have tried to set up Assumed Users with several users linking them to their static IP's. I first created a Wingate user to link them to. I also found in a forum article to go to Policies and set a policy for everyone where "user may be assumed".

OK...did this. But nothing seems to be linked up. None of the users i created appear in the activity pane as being assumed. And the users i linked do not populate any stats. What is the purpose of doing this? My thinking was if i could now track the users, i could then impose policies on them without formal authentication.

Question 2

In Policies there is a "Default Rights (System Policies) tab. What are the implications of this on policies?

Long question short, how do I use Assumed Users to make my network more secure.

Thanks,

G'day,

All situations for me work on Assumed users, a mix of DHCP with static configuration and report correctly in V6.0.3. on the O/s User DataBase.

Are you using the O/s User DataBase or Wingate's UDB, sounds as though you might be on the latter?

As for the system rights question, it is a configuration area that can be applied globally to traffic through Wingate as I understand it. One instance for example is: Ban on all MSN and then this is applied to the various services where is is required, yet ignored in others as irrelevant or possibly causing a conflict.

Haven't considered the security issue of user assumption, someone else maybe able to take this further.

Nev.