TRITON - Web Security Help, Version 7.7 - Websense

User IdentificationUnder User Identification Exceptions, list the IP addresses of machines that shoulduse different user identification settings than the rest of your network.For example, if you use a transparent identification agent or integration product toidentify users, and have enabled manual authentication to prompt users for theircredentials when they cannot be identified transparently, you can identify specificmachines on which:Users who cannot be identified are never be prompted for their credentials. Inother words, when transparent identification fails, manual authentication is notattempted, and the computer or network policy, or the Default policy, is applied.User information is always ignored, even when it is available, and users arealways prompted for their credentials.User information is always ignored, even when it is available, and users are neverprompted for their credentials (the computer or network policy, or the Defaultpolicy, is always applied).To create an exception, click Add, and then see Setting authentication rules forspecific machines, page 299. To remove an exception, mark the check box next to anIP address or range, then click Delete.Under Additional Authentication Options, specify the default response of Websensesoftware when users are not identified transparently (by an agent or integration):Click Apply computer or network policy to ignore user and group-basedpolicies in favor of computer and network-based policies, or the Default policy.Click Prompt user for logon information to require users to provide logoncredentials when they open a browser. User and group-based policies can then beapplied (see Manual authentication, page 297).Specify the Default domain context that Websense software should use any timea user is prompted for log on credentials. This is the domain in which users’credentials are valid.If you use the Exceptions list to specify any machines on which users areprompted for logon information, you must provide a default domain context, evenif the global rule is to apply a computer or network-based policy.When you are finished making changes on this page, click OK to cache your changes.Changes are not implemented until you click Save and Deploy.Setting authentication rules for specific machinesTRITON - Web Security Help | Web Security Solutions | Version 7.7.xRelated topics: Configuring user identification methods, page 298 Manual authentication, page 297 Secure manual authentication, page 302TRITON - Web Security Help 299