Chapter 16 SSL VPN : Basic configuration : User accounts and groups
  
User accounts and groups
The first step for an SSL VPN tunnel is to add the users and user groups that will access the tunnel. You may already have users defined for other authentication-based security policies.
The user group is associated with the web portal that the user sees after logging in. You can use one policy for multiple groups, or multiple policies to handle differences between the groups such as access to different services, or different schedules.
To create a user account:
In the web-based manager, go to User & Device > User > User Definition, and select Create New.
In the CLI, use the commands in config user local.
All users accessing the SSL tunnel must be in a firewall user group. User names can be up to 64 characters long.
To create user groups:
In the web-based manager, go to User & Device > User > User Groups and select Create New.
In the CLI, use the commands in config user group.