A region or region group is a set of IP addresses based on geographical location. You can reference regions and region groups in policies for region-based control.
An IP address pool is a collection of IP addresses. You can reference an IP address pool in a service-scheme and assign IP address to the accessing users.
A certificate identifies a terminal entity on a network. Authenticating a user identity using a certificate is more secure than that using traditional methods, such as a user name or password, and also has a better scalability.
This section describes common authentication servers, including the Remote Authentication Dial In User Service (RADIUS) server, Huawei Terminal Access Controller Access Control System (HWTACACS) server, Lightweight Directory Access Protocol (LDAP) server, Active Directory (AD) server, and Agile Controller.
The application identification module on the FW can identify common applications with details. You can create application-specific policies to deliver differentiated and fine-grained application control.