Adding Guest Accounts

To add a new guest account

1. Navigate to the Device > Users > Guest Accounts page.
2. Under the list of guest accounts, click Add Guest Account > Settings.
3. Configure these parameters for the guest account:
   • Profile: Select the Guest Profile from which to generate this account.
   • Name: Enter a name for the account or click Generate. The generated name is the prefix in the profile and a random two or three digit number.
   • Comment: Enter a descriptive comment.
   • Password: Enter the user account password or click Generate. The generated password is a random string of eight alphabetic characters.
   • Confirm Password: If you did not generate the password, re-enter it.

4. Go to Add Guest > Guest Services.

   • Enable Guest Services Privilege: Check this for the account to be enabled upon creation.
   • Enforce login uniqueness: Check this to allow only one instance of this account to log into the security appliance at one time. Leave it unchecked to allow multiple users to use this account immediately.
   • Automatically prune account upon account expiration: Check this option to have the account removed from the database after its lifetime expires.
   • Select Activate account upon first login to begin the timing for the account expiration.
   • Account Expires: This setting defines how long an account remains on the security appliance before the account expires. You can specify from 1 to 9999 in the Account Expires field and select the type of duration from the drop-down menu:
     • Minutes
     • Hours
     • Days

     The default is 7 Days.

   • If Automatically prune account upon account expiration is:
     • Enabled, the account is deleted when it expires.
     • Disabled, the account remains in the Guest Accounts table with an Expired status to allow easy reactivation.

   • To define the maximum period of time when no traffic is passed on an activated guest services session, enter the timeout duration in Idle Timeout. Exceeding the period defined by this setting expires the session, but the account itself remains active as long as the Account Lifetime has not expired. The Idle Timeout cannot exceed the value set in the Session Lifetime.

     This setting overrides the idle timeout setting in the profile.

     You can specify from 1 to 9999 in the Account Lifetime field and select the type of duration from the drop-down menu:

     • Minutes
     • Hours
     • Days

     The default is 10 Minutes.

5. To specify the quota cycle type, select from the Quota Cycle Type Setting drop-down menu:
   • Non Cyclic (default)
   • Per Day
   • Per Week
   • Per Month

6. To define how long a guest login session remains active after it has been activated, specify the duration in Session Lifetime. By default, activation occurs the first time a guest user logs into an account. The Session Lifetime cannot exceed the value set in the Account Lifetime.

   This setting overrides the session lifetime setting in the profile.

   You can specify from 1 to 9999 in the Session Lifetime field and select the type of duration from the drop-down menu:

   • Minutes
   • Hours
   • Days

   The default is 1 Hours.

7. Receive limit (0 to disabled): Enter the number of megabytes the user is allowed to receive. The minimum number is 0, which disables the limit; the maximum is Unlimited, the default.
8. Transmit limit (0 to disabled): Enter the number of megabytes the user is allowed to transmit. The minimum number is 0, which disables the limit; the maximum is Unlimited, the default.
9. To limit the amount of data the user can receive, enter the amount, in MB, in Receive limit (0 to disable) field. The range is from 0 (no data can be received) to 999999999 MB to Unlimited (default).
10. To limit the amount of data the user can send, enter the amount, in MB, in Transmit limit (0 to disable) field. The range is from 0 (no data can be received) to 999999999 MB to Unlimited (default).
11. Click Save to generate the guest account.