Administrator's Guide - Kerio Software Archive

11.1 Firewall User Authentication
This authentication method is not recommended for cases where hosts are used by
multiple users (user’s identity might be misused easily).
• Redirection — when accessing any website (unless access to this page is explicitly
allowed to unauthenticated users — see chapter 13.2).
Login by re-direction is performed in the following way: user enters URL pages that
he/she intends to open in the browser. Kerio Control detects whether the user has
already authenticated. If not, Kerio Control will re-direct the user to the login page
automatically. After a successful login, the user is automatically re-directed to the
requested page or to the page including the information where the access was denied.
• Using NTLM — if Internet Explorer or Firefox/SeaMonkey is used and the user
is authenticated in a Windows NT domain or Active Directory, the user can be
authenticated automatically (the login page will not be displayed). For details, see
chapter 25.3.
User authentication advanced options
Login/logout parameters can be set on the Authentication Options tab under Users and Groups
→ Users.
Figure 11.1
User Authentication Options
161