Sidewinder G2 6.1.2 Administration Guide - Glossary of Technical ...

Users, groups,
and
authentication
Chapter 10: Setting Up Authentication
Users, groups, and authentication
The numbers in Figure 129 represent the sequence of events that occur when
a remote user requests a network connection through the Sidewinder G2.
These events are described below. In this scenario, the user is authenticated
using SafeWord PremierAccess, which implements a challenge-response
authentication process. (Note that the process is different for other
authentication methods.)
1 A user tries to make a network connection via Telnet or FTP.
2 The Sidewinder G2 checks the active rules to determine whether the
connection between the source and destination addresses is allowed and
to determine which warder to use.
3 If the connection is allowed, the proxy contacts the appropriate warder in
the Sidewinder G2.
4 The warder passes the log in request to the appropriate authentication
server. The server checks the data base to verify the user’s log in name is
registered and then generates a log in prompt.
5 The log in challenge is sent to the user. Using client software or a hardware
authenticator, the user types in the proper response to the prompt.
6 The Sidewinder G2 sends the response to the authentication server. The
authentication server checks the response and informs the Sidewinder G2
to either accept or reject the log in request.
As a Sidewinder G2 administrator, you are responsible for configuring the
Sidewinder G2 to work with the desired authentication server. The first step is
identifying the users that will need authentication services on the Sidewinder
G2. You can set up authentication on a user-by-user basis or create user
groups. A user group is a mechanism that allows you to identify multiple users
by a single name, making it easier to configure authentication requirements for
your network.
Note: The procedures to add users to the user database and set up user groups
are described in Chapter 5.
After defining and creating the appropriate user groups for your site, you need
to configure the authentication method(s) that your site will use. The following
section describes what needs to be done to configure the Sidewinder G2 for
authenticating users or administrators.
283