SonicOS 8 TZ Series Getting Started Guide

User Settings

Local users can access the firewall using Radius with NPS, OKTA, or other IdP providers. LDAP can be used with Active Directory or Azure AD via Legacy LDAP over SSL. Capture Client provides the local username to the firewall.

Local Users To configure users in the local database using the Device | Users | Local Users and Groups > Local Users (or Local Groups) tabs. pages.
RADIUS If you have more than 1,000 users or want to add an extra layer of security for authenticating the user to the firewall. If you select Use RADIUS for user authentication, user much log into the firewall ussing HTTPS to encrypt the password sent to the firewall. For information on configuring RADIUS, refer to "Configuring Radius" section inSonicOS 8 Users Administration Guide
RADIUS + Local Users If you want to use both RADIUS and the SonicWall local user database for authentication.
LDAP If you use an LDAP (Lightweight Directory Access Protocol) server or AD (Microsoft Active Directory) to maintain all your user account data. For information on configuring LDAP, refer to "Configuring LDAP" section in SonicOS 8 Users Administration Guide
LDAP + Local Users If you want to use both LDAP and the SonicWall local user database for authentication.
TACACS If you use Terminal Access Controller Access-Control System Plus (TACAS+) protocol for authentication. For information on configuring LDAP, refer to "Configuring TACACS+" section in SonicOS 8 Users Administration Guide
TACACS+ Local Users If you use Terminal Access Controller Access-Control System Plus (TACAS+) protocol and the SonicWall local user database for authentication.