Creating new users and groups on the Proxy SG

Users and groups are added via the CLI

Security local-user-list create LocalRealmUserList

Security local-user-list edit LocalRealmUserList

Group create executives

user create boss

User edit boss

Password pass

Group add executives

Exit

User create bob

User edit bob

Password pass

Exit

To use these users in policy, open VPN and create a Web Auth layer. The action will be local auth (auth>new>local>select your realm).

Next create a web access layer that uses these users (source should be local user/group).