NxFilter Tutorial
Tutorial Index

GUI - User
You can create or import users and groups here. NxFilter supports user importation from Active Directory and OpenLDAP.

User > User
There are 3 types of users you can create on NxFilter.

1. IP user
It has associated IP addresses and will be authenticated by its associated IP addresses.

You can associate multiple IP ranges to a user.

2. Password user
If you set a password for a user it becomes a password user. You can use the password on the login page of NxFilter.

3. LDAP user
When you import users from your LDAP server or Active Directory they become LDAP users. They can use LDAP or Active Directory user credentials on NxFilter's login page.

A user has the following properties,

  • Password : The password for login through NxFilter's login page.
  • Work-time Policy : The policy to be applied when it is not in the free-time.
  • Free-time Policy : The policy to be applied during the free time. You can define a free-time on 'Policy > Free Time'.
  • Expiration Date : The expiration date for a user account.
  • Login Token : The token for Remote Filtering. It is created when a user created or imported.
  • Group : You can set a group for a user created manually on NxFilter GUI.

When you have an LDAP imported user you may have multiple groups and policies for a user. As a result, it becomes difficult to figure out which policy a user falls into. To find out which is the currently applied policy for a user, use 'TEST' button on the user list. It fetches the real-time state of a user from NxFilter.

You can use this test view to find out how much quota or bandwidth consumed by a user or to reset them for a user.

User > Group
Once you create a group on 'User > Group', you can set up a policy for the group by editing its properties. You also can assign members to the group.

You can define a group specific free-time. It will be combined with the free-time on 'Policy > Free Time'.

User > Active Directory
You can import users and groups from Active Directory on 'User > Active Directory'. For example, if you have your Active Directory with the following setup.

  • Domain controller :
  • Domain : nxfilter.local
  • Admin username : Administrator

Then create an Active Directory importation setup with the following details.

  • Host :
  • Admin : Administrator@nxfilter.local
  • Password : your-password
  • Base DN : cn=users,dc=nxfilter,dc=local
  • Domain : nxfilter.local

After having an Active Directory importation setup, you can import users and groups with 'IMPORT' button. You also can set up a periodical import by selecting an auto-sync interval.

Use 'TEST' button to verify your Active Directory importation setup.

User > OpenLDAP
This is for importing users and groups from OpenLDAP. It's not much different from Active Directory user importation. With OpenLDAP, you also can import users from G Suite LDAP. To find out more, read Google's GSuite Secure LDAP import to NxFilter
NxFilter supports single sign-on by 802.1x Wi-Fi authentication. To find out more, read Single sign-on by 802.1x

User > Mass Import
You can create users en masse by importing space-delimited usernames here.

User > VxLogon
VxLogon is a script version of Active Directory single sign-on agent for NxFilter.

- Logon Domain
Special domain defined for logon signal of VxLogon. When you change this, you need to change the domain in 'vxlogon.vbs' of VxLogon package.

- Logon Domain
Special domain defined for logoff signal of VxLogon. When you change this, you need to change the domain in 'vxlogoff.bat' of VxLogon package.

- Use VxLogon
Enable or disable VxLogon support.

User > CxLogon
CxLogon is a single sign-on agent for NxFilter. It works with or without Active Directory. To find out more, read Single sign-on by CxLogon

- Auto-register for New User
With this option, NxFilter will add users by their login requests. This option is useful when you don't have Active Directory and don't want to process each login request manually.

- Default Group for New User
You can set the default group for auto-registered users.

User > Login Request
When you use CxLogon for single sign-on and if there is a new username detected by CxLogon, NxFilter will add a login request here. Once you approve a new login request, a new user will be created on NxFilter with the new username. To find out more, read Single sign-on by CxLogon