Firewall user groups are used locally as part of authentication and can contain any type of user identity except an FSSO group. When a security policy allows access only to specified user groups, users must authenticate. If the user authenticates successfully and is a member of one of the permitted groups, the session is allowed to proceed.

This section includes: