How to configure Guest User Settings on your firewall

How to Configure Guest User Settings on Your GajShield Firewall

Guest user access is commonly used when visitors, contractors, vendors, or temporary users need internet access without being given access to the internal network. GajShield Firewall allows administrators to create and manage guest user settings so that access can be controlled, monitored, and restricted based on business requirements.

Why Guest User Settings Are Important

Guest users should never be treated the same as regular employees. They usually require limited internet access for a short duration and should not have unrestricted access to business applications, servers, or internal resources.

By configuring guest user settings, administrators can:

• Provide temporary internet access to visitors
• Restrict guest users from accessing internal networks
• Apply web filtering and security policies
• Monitor guest user activity
• Set access validity and usage limits
• Improve overall network security

When This Configuration Is Required

Guest user settings are useful in environments such as:

• Offices where visitors need Wi-Fi access
• Hotels, hospitals, schools, and colleges
• Branch offices with temporary users
• Vendors or contractors requiring internet access
• Public-facing waiting areas or reception zones

In this document, we will guide you through the configuration of Guest User Settings on your firewall.

To begin the Guest User Settings configuration, go to Browsing -> Guest Users -> Guest Users

The following screen appears:

This is the add guest users page for browsing authenticated users. You can add a new guest user using this option.

•  To add a new guest user, click on  icon.

To add guest users, the following information is needed:

Login ID: This field is used to specify the login id that users give to authenticate themselves. The Login ID field is an incremental field. By default, the login id assigned in this field depends on the count of guest users created. You can change it if you wish to.

Password: You can specify the password that the users would give to authenticate themselves in this field.

First name: The first name specified in this field will be used for display information.

Last name: The last name specified in this field will be used for display information.

Validity: This field specifies the amount of time the guest user will be provided browsing access.

Group (Optional): This field specifies the Group in which the guest user will be added.

Mobile Number (Optional): This is an optional field. The user's mobile number can be specified here.

Email ID (Optional): The email id of the users to be browsing authenticated is specified here.

Allowed Sessions (Optional): This is an optional field. It specifies the number of browsing sessions allowed. 0 means any number of sessions are allowed.

Authentication Schedule (Optional): This field is optional. It specifies the time frame within which the users in the group will be authenticated.

NOTE: To successfully add the user you will have to restart the browsing policy by going to Browsing -> Setup -> Restart Browsing

Recommended Security Practices

For better security, follow these practices:

• Keep guest users on a separate VLAN or network zone.
• Do not allow guest users to access internal servers.
• Set an expiry time for guest accounts.
• Use strong or auto-generated passwords.
• Apply web filtering and malware protection.
• Monitor guest user logs regularly.
• Disable or remove unused guest accounts.
• Avoid sharing permanent credentials with visitors.

Conclusion

Guest user settings help organisations provide safe and controlled internet access to temporary users without compromising internal network security. Properly configured guest access ensures that visitors get the connectivity they need while administrators retain visibility, control, and protection over the network.

Attached Files:
How_to_configureA_Guest_User_Settings_on_your_firewall.pdf