Add an Authentication Domain to WatchGuard Cloud

An authentication domain is a domain associated with one or more external authentication servers. In WatchGuard Cloud, you can add your authentication domain, and specify authentication servers, users, and groups. The authentication domain is a shared configuration that you can use for multiple cloud-managed devices.

To add an authentication domain, from WatchGuard Cloud:

  1. If you are a Service Provider, select the name of the managed subscriber account.
  2. Select Configure > Authentication Domains.
    The Authentication Domains page opens.

Screen shot of the Authentication Domains page

  1. Click Add Authentication Domain.

    The Add Authentication Domain page opens.

Screen shot of the Add Authentication Domain page

  1. In the Domain Name text box, type the domain name to add.
    The domain name must include a domain suffix. For example, type example.com, not example.
  2. Click Next.

Screen shot of the Add Authentication Domain page, Add servers step

  1. Select the server type.
  2. Configure the settings for the selected server type.

Configure RADIUS Server Settings

To configure settings for a RADIUS server:

  1. In the Add servers settings, select RADIUS.

Screen shot of the Add servers settings, with RADIUS selected

  1. In the IP Address text box, type the IP address of the RADIUS server. You can specify IPv4 or IPv6 IP addresses.
  2. In the Port text box, type the port number RADIUS uses for authentication. Most RADIUS servers use port 1812. Older RADIUS servers might use port 1645.
  3. In the Shared secret text box, type the shared secret for connections to the RADIUS server.
  4. In the Confirm shared secret text box, type the shared secret again.
  5. Click Save.

Make sure your RADIUS server is also configured to accept connections from each cloud-managed Firebox as a RADIUS client. For more information, see Configure RADIUS Server Authentication for a Firebox.

Configure Active Directory Server Settings

To configure settings for an Active Directory server:

  1. In the Add servers settings, select Active Directory.

Screen shot of the Add servers settings, with Active Directory selected.

  1. In the Server Address text box, type the domain name or IP address of your Active Directory server.
  2. (Optional) To enable secure SSL connections to your Active Directory server, select Enable secure SSL connections to your Active Directory Server (LDAPS).
  3. Click Save.

After you add the authentication domain, you can add users, groups, and additional servers. For more information, see:

See Also

WatchGuard Cloud Authentication Domains

Configure RADIUS Authentication for a Firebox

Access Point Authentication Domains