The Firebox configuration file automatically includes two Firebox User groups called pptp_users and ipsec_users. When a remote host connects and creates a tunnel, Policy Manager authenticates the username against the list of members for the group associated with the tunnel type. In other words, an incoming PPTP tunnel would authenticate against the pptp_users group.
Once authenticated, the Policy Manager then adds the remote client IP address to the group. Use the Firebox User group to configure services for incoming and outgoing RUVPN traffic.
Because of the way Windows holds the username and password for subsequent logins, one option to reduce end-user confusion is to assign the same RUVPN login and password as those used for Windows NT login and password. This method, however, is less secure than using multiple passwords.
RUVPN users must be added as Firebox users even if another authentication method is used internally.