A user can only belong to one user group. The users in the same user group share the same service policy. A user group has only one service policy. The services available for a user group include:
• Web Login: Allows the members of the user group to log into the Configuration Utility through the web browser to view the configuration only or to set the configuration.
• SSL VPN: Allows the members of the user group at remote sites to establish the SSL VPN tunnels based on the selected SSL VPN group policy to access your network resources. The Cisco AnyConnect Secure Mobility Client software must be installed on user’s PC.
• IPsec Remote Access: Allows the members of the user group at remote sites to establish the VPN tunnels to securely access your network resources.
• Captive Portal: Allows the wireless users who have authenticated successfully to be directed to a specified web page (portal) before they can access the Internet. This service only applies to ISA550W and ISA570W.
Note The security appliance can perform the authentications in parallel when multiple services need to authenticate at the same time.