Setting up Groups
Cyberoam User Guide
Setting up Groups
Add a New Group
Group
Group is a collection of users having common policies and a mechanism of assigning access of resources to a number of users in one operation/step.
Instead of attaching individual policies to the user, create group of policies and simply assign the appropriate Group to the user and user will automatically inherit all the policies added to the group.
This simplifies user configuration.
A group can contain default as well as custom policies.
Various policies that can be grouped are:
1. Surfing Quota policy which specifies the duration of surfing time and the period of subscription
2. Access Time policy which specifies the time period during which the user will be allowed access
3. Internet Access policy which specifies the access strategy for the user and sites
4. Bandwidth policy which specifies the bandwidth usage limit of the user
5. Data Transfer policy which specifies the data transfer quota of the user (only if ‘Data
Transfer policy’ add-on module is registered)
6. Printing Quota policy which specifies the printing quota of the user (only if ‘Printer Policy’ add-on module is registered)
Refer to Policy Management for more details on various policies.
Group types
Two types of groups:
1. Normal
2. Clientless
Normal A user of this group need to logon to Cyberoam using the Cyberoam Client to access the
Internet
Clientless A user of this group need not logon to Cyberoam using the Cyberoam Client to access the Internet. Access control is placed on the IP Address. Symbolically represented as Group
name (C)
Use the below given decision matrix to decide which type of group will best suited for your network configuration.
Decision matrix for creation of Group
Feature
Logon into Cyberoam required
Type of User
Normal
Clientless
Apply Login restriction
Apply Surfing Quota policy
Apply Access Time policy
Apply Bandwidth policy
Normal Group Clientless Group
Yes
Yes
No
Yes
Yes
Yes
Yes
No
No
Yes
No
No
No
Yes
31
Setting up Groups
Cyberoam User Guide Add a New Group
Apply Internet Access policy
Apply Printing Quota policy (Only if ‘Printing
Policy’ add-on module is registered)
Yes Yes
Yes Yes
Apply Data transfer policy (Only if ‘Data
Transfer Management’ add-on module is registered)
Yes No
Table - Group creation - Decision matrix
Add a New Group
Prerequisite
• All the policies which are to be added to the Group are created
• Host group created if login is to be restricted from a particular Node/IP Address
Select
Group Æ Add Group to open add group page
Screen - Create Group
32
Setting up Groups
Cyberoam User Guide Add a New Group
Screen Elements
Create Group
Group name
Description
Group type
Surfing Quota Policy
Only if Group type is ‘Normal’
Access Time Policy
Only if Group type is ‘Normal’
Specify Group name. Choose a name that best describes the Group.
Allows maximum of 30 characters
Can be any combination of A – Z, a – z, ‘_’, 0 - 9
Specify type of Group
Click Group type to select
Select Normal if Group members are required to log on using
Cyberoam Client
Select Clientless if Group members are not required to log on using
Cyberoam Client
Specify Surfing Quota Policy for Group
Click Surfing Quota Policy list to select
By default, ‘Unlimited policy’ is assigned to the ‘Clientless’
Group type
Refer to Surfing Quota Policy for more details
Specify Access Time policy for Group
Click Access Time Policy list to select
By default, ‘Unlimited policy’ is assigned to ‘Clientless’ Group type
Refer to Access Time Policy for more details policy
Bandwidth Policy
Data Transfer policy
Available only if
‘Data transfer
Management’ addon module is registered
Printing Quota policy
Available only if
‘Printing policy’ add-on module is registered
Login Restriction
Click Internet Access policy list to select
Refer Internet Access policy for details
Specify Bandwidth Policy for Group
Click Bandwidth Policy list to select
Refer Bandwidth Policy for details
Specify data transfer policy for Group
Click Data Transfer policy list to select
Refer Data Transfer Policy for details
Specify Printing Quota policy for Group
Click Printing Quota policy list to select
Refer Printing Quota Policy for details
33
Setting up Groups
Cyberoam User Guide
Screen Elements Description
Add a New Group option Group
Available options
1) Allowed login from all nodes
Allows Users defined under the Group to login from all the nodes
2) Allowed login from the selected nodes
Allow Users defined under the Group to login from the selected nodes only.
Specifies IP address from where User can login
Click Select Node, opens a new window and allows to select IP
Address
Refer to Select Node table for more details Refer to Apply Login
Node restriction for more details
Click to select
Opens a new page and allows to select the node
Click to select the Node
Select Node button
Only if ‘Allowed
Login from selected node’ option is selected for Login restriction
Create button
Cancel button
Creates Group
Cancels the current operation and returns to the Manage Group page
Table - Create Group screen elements
Note
It is not necessary to add user at the time of the creation of Group. Users can be added even after the creation the group.
34
Setting up Groups
Cyberoam User Guide
Apply Login Node Restriction
Screen – Apply Login Node Restriction
Add a New Group
Screen Elements Description
Host Group name Host group from which the Node/IP address is to be added
Click Host Group name list to select
Select User will be allowed to login from the selected nodes only.
Click to select Node
Multiple nodes can also be selected
OK button
Cancel button
Applies login restriction and closes the window
Click to apply restriction
Cancels the current operation
Table - Apply Login Node Restriction screen elements
35
