Sidewinder G2 6.1.2 Administration Guide - Glossary of Technical ...

Setting up
authentication
for Web sessions
Name (g2_ipaddr:proxy-user):@172.1.1.25
Chapter 10: Setting Up Authentication
Setting up authentication for Web sessions
Users who incorrectly put a user name before the prompt are still allowed
access to the FTP server through the non-transparent FTP rule that does
not require authentication. The Sidewinder G2 handles entries containing
user names that do not match any existing FTP rule and entries without a
user name in the same manner.
You can require users to enter a password before they are allowed Web
access. To do so requires that the user access the Web using either the Web
proxy server or the HTTP proxy, both of which can authenticate using either
fixed or one-time passwords, but cannot use a challenge/response form of
authentication.
Follow these steps to set up Web authentication.
1 Ensure that the authentication method you want to use is configured and
enabled. See “Configuring authentication services” on page 284.
2 Ensure that the Web proxy server or HTTP proxy is configured, enabled,
and is using the proper authentication method.
• To enable and configure the Web proxy server, see “Configuring the
Web proxy server” on page 383.
• To enable and configure the HTTP proxy, see “Configuring proxies” on
page 266.
3 Add or modify proxy rules as needed. You must create one or more rules
that define Web access between two burbs on your Sidewinder G2.
Note: When using standard password authentication, you may want to allow
users to change their own log in password from their terminal or workstation.
See “Allowing users to change their passwords” on page 306.
305