System information

VPN Concentrator Configuration 155
Modify Groups—Identity Tab
To modify the group, click the group to highlight it, and then click the Modify Group button.
The screen shown in Figure 4-20 shows the Modify screen for an internal group. Internal groups
have multiple tabs. External groups only have the Identity tab. The information in this screen
should match the data you entered during Quick Configuration. If not, you can correct it here.
When everything looks correct, click the General tab.
Figure 4-20 Configuration | User Management | Groups | Modify > Identity
Modify Groups—General Tab
Figure 4-21 depicts the General tab for the group’s Modify function. Notice that each attribute
listed has a Value, Inherit?, and Description column. If the Inherit? box is checked, that
attribute’s value is inherited from the Base Group, regardless of what you enter into the Value
field. To change the value for an attribute, uncheck the Inherit? box.
The following information is shown on the General tab:
• Access Hours—Selected from the drop-down menu, this attribute determines when the
concentrator is open for business for this group. Currently set to No Restrictions, you
could also select Never, Business Hours (9 a.m. to 5 p.m., Monday through Friday), or
named access hours that you created elsewhere in the VPN Manager.
• Simultaneous Logins—Default is 3. Minimum is 0. There is no upper limit, but you
should limit this value to 1 for security purposes.
• Minimum Password Length—The allowable range is 1 to 32 characters. A value of 8
provides a good level of security for most applications.
• Allow Alphabetic-Only Passwords—Notice that the Inherit? box has been unchecked.
The default is to allow alphabetic-only passwords, which is not a good idea. This value
has been modified.
• Idle Timeout—A value of 30 minutes is good here. The minimum allowable value is 1
and the maximum is a value that equates to over 4000 years! 0 disables idle timeout.
chpt_04.fm Page 155 Friday, April 4, 2003 9:19 AM