Update Group to:
• Order of the group
• Change policies - Surfing time policy, Access time policy, Internet Access policy, Bandwidth policy and Data transfer policy
• Change the login restriction for the users of the group
• Add new users to the group
Select Group Æ Manage Group to view the list of groups
Screen components
Select Column button – Click to customize the number of columns to be displayed on the page
Edit icon - Click to edit the group details. Refer to Update Group for more details.
Insert icon - Click to insert a new group before the existing group. Refer to Add a new Group for more details.
Move icon - Click to change the order of the selected group. Refer to Change the group order for details.
Delete icon - Click to delete the group. Refer to Delete Group for more details.
Change Group order
Ordering of group is important when Active Directory users are members of multiple groups. Cyberoam decides the group membership of the authenticated users based on group order. Based on the group membership the respective access control policies are applied to the users.
Cyberoam searches Group ordered list from top to bottom and determines the user group membership.
The first group that matches is considered as the group of the user and that group policies are applied to the user.
Select Group Æ Manage Group
Click the move button against the rule whose order is to be changed
Select Before or After as per the need
Click the rule to be moved and then click where it is to be moved.
Click Done to save the order
Update Group
Need may arise to change the Group setting after the creation of Group. Select Group Æ Manage Group and click the Group to be modified
To Click
Show Group Members Show Group Members button
Refer to View Group members for details Change Surfing Quota Policy Change Policy button
Only for ‘Normal’ Group type
Change Access Time Policy Access Time Policy list Change Internet Access policy Internet Access policy list Change Bandwidth Policy Bandwidth Policy list Change Data transfer policy Data transfer policy list
Change Login Restriction Change Login Restriction button Table - Need to Update group
Screen - Manage Group
Screen Elements Description Group Information
Group Name Displays Group name, modify if required Show Group
Members button
Opens a new window and displays list of group members Surfing Quota policy Displays currently attached Surfing Quota policy to the Group Change policy
button
Only for ‘Normal’
Group type
Click to change the attached Surfing Quota policy
Opens a new window and allows to select a new Surfing Quota policy Click Change policy
Click Select to select from available policy Click Done to confirm the selection Click Cancel to cancel the operation
Surfing quota policy, Time allotted & Expiry date changes accordingly Time allotted
(HH:mm)
Displays total surfing time allotted by Surfing Quota policy to the Group Cannot be modified
Expiry date Displays Expiry date of the Surfing Quota policy Cannot be modified
Displays type of cycle Cannot be modified
Used Surfing Time Displays total time used by the Group members Cannot be modified
Access Time policy Only for ‘Normal’
Group type
Displays currently attached Access Time policy to the Group To change
Click Access Time policy list to select
Click View details to view the details of the policy Internet Access
policy
Displays currently attached Internet Access policy to the Group To change
Click Internet Access policy list to select
Click View details to view the details of the policy
Bandwidth policy Displays currently attached Bandwidth policy to the Group To change
Click Bandwidth policy list to select
Click View details to view the details of the policy
Data Transfer policy Displays currently attached Data Transfer policy to the Group To change
Click Data Transfer policy list to select
Click View details to view the details of the policy
MAC Binding Enable MAC binding if required. By binding MAC, all the group users will be mapped with MAC addresses defined in User configuration and user will be able to login through pre-specified machines only.
User Authentication Settings User Authentication
Session time out
Authentication Session timeout is the number of minutes that an authenticated connection can be idle before the user must authenticate again.
Click to enable session timeout on group basis.
By default, this option is disabled.
The minimum timeout that can be configured is 3 minutes and maximum is 1440 minutes (24 hours)
Keep Alive Request for HTTP Client
Keep-Alive requests are constantly exchanged between server and client to check the connectivity between them. More number of concurrent HTTP client users, more number of keep-alive requests. Hence, Cyberoam recommends to disable Keep-alive request if there are more number of concurrent HTTP client users.
By default, this option is enabled.
Login Restriction
Display login restriction applied to the Group members Change Login
Restriction button
Click to change login restriction
Refer to Change Login Restriction for more details
Save button Saves the modified details. Any changes made are applicable to all the group members.
Add Members Allows to add members to the group Click to add
Refer to Add Group Members for details Renew Data
Transfer
Renews data transfer policy of all the group members (Only if Data transfer policy is Non-cyclic and shared) Cancel button Cancels the current operation
Table - Manage Group screen elements Show Group Members
Screen - Show Group Members
Screen Elements Description
Group name Displays Group name
Total members Displays Total Group members/users
User Name User name
Name with which the Employee logs in Employee Name Employee name
Allotted Time Total Allotted time to the user
Refer to Access Time policy for details Expiry Date Expiry date of the policy attached to the User
Refer to Surfing time policy for details Used Time Total time used by the User
Close button Closes the window
Table - Show Group Members screen elements Add Group Member(s)
Select Group Æ Manage Group and click the Group in which user is to be added. Click “Add
Member(s)”
Screen – Add Group Member
Screen Elements Description
Select Group List of members belonging to the selected group will be displayed
Click to select the Group Username/Name
starting with (* for All)
Search user
Specify username or * to display all the users Search button Search user from the selected Group
Displays list of users in the selected Group
Click Add against the user to be added Add button Adds selected user(s) to the group
Close button Closes the window and returns to Edit Group page Table – Add Group Member screen elements
Change Login Restriction
Select Group Æ Manage Group and click the Group
Screen - Change Login Restriction
Screen Elements Description Login Restriction
Displays the current login restriction - Click to change the current restriction Save button Saves if the restriction is changed Cancel button Cancels the current operation Select Node(s) button
Only if the option ‘Allowed login from selected nodes’ is selected
Click to select the Node for restriction
IP address Displays IP address
Machine name Displays Machine name if given
Allowed from Click to select
Multiple nodes can be selected
Apply Restriction button Applies the login restriction for the group members i.e. Group members will be able to login from the above selected nodes only
Cancel button Cancels the current operation Table - Change Login Restriction screen elements Delete Group
Prerequisite
No Group members defined
Select Group Æ Manage Group and click the delete icon against the rule to deleted