iPrism Administration Guide - EdgeWave

The Big Picture
• IM/P2P Profiles filter IM and P2P usage.
Each profile is associated with a group of users. One way of identifying
users is by the IP address of the machine they are using. For example, you
can define a profile called “Sales” which contains all the addresses in the
range 192.168.77.0 to 192.168.77.255.
Users can also be identified by a user name and password through an
authentication process. There are a number of authentication systems
available including NTLM (for Microsoft Windows users) and LDAP (for
UNIX, Linux, and Novell users).
Finally, you can manually add users to your iPrism. In practice, manual
creation is usually only done for iPrism administrators and subadministrators.
Assigning Profiles
Now that have set up profiles, you need to learn how to associate a profile
with the people to which it applies. The simplest way of doing this is to
assign a profile to a set of IP addresses. Anyone using a machine which has
one of these addresses will be assigned the same profile. This is useful when
you have a lot of public or lab machines and wish to apply the same profile
to everyone in the room. For example, if you’re running a school, you can
assign a profile called “KidSafe” to all the machines in the student lab, and
assign a profile called “NoBlocking” to the teacher’s offices.
You can also assign profiles to a set of authentication users. (Authentication
means that you have a username to work with which has been validated by a
password.) Although each web access message contains the IP address of
the computer making the request, there is no user identification included in
the message. 1
The iPrism system interfaces with Windows NTLM authentication as well
as LDAP which is used UNIX, Linux, Novel. If you want to use “user
level” authentication, Chapter 6: Users and Authentication contains simple,
step-by-step instructions which will help you get your iPrism working with
1. This is not always true. If you configure your iPrism and user computers just right, you
can create a system where each web access message will contain user identification. This
complex form of configuration is discussed in Chapter 6: Users and Authentication.
16
iPrism Administration Guide