TRITON - Web Security Help, Version 7.7 - Websense

User IdentificationSpecify whether or not a Welcome page is displayed when users who have notbeen identified via NTLM or who are not using secured form authentication opena browser to connect to the Internet. The Welcome page:• Provides a simple selection of common search engines to get the user started• Is used mainly by those who connect to the hybrid service from outside afiltered location (while working from home or traveling, for example)When you are finished, click OK to cache your changes. Changes are notimplemented until you click Save and Deploy.Once you have set up hybrid filtering and configured user browsers to access the PACfile, you can use the links provided under Verify End User Configuration to makesure that end user machines have Internet access and are correctly configured toconnect to the hybrid service.If your hybrid filtering account has not been verified (which may mean that no emailaddress has been entered on the Settings > General > Account page), the URLs are notdisplayed.Authentication priority and overridesTRITON - Web Security Help | Web Security Solutions | Version 7.7.You can select multiple authentication options for your end users on the Settings >Hybrid Configuration > Hybrid User Identification page. The options areprioritized as follows:Web Endpoint is always used if installed on a client machine.If Web Endpoint is not installed or fails, Authentication Service is used if:• it has been deployed in your network, and• it has been selected on the Hybrid User Identification page for an end userfiltered by the hybrid service.If neither Web Endpoint nor Authentication Service is available, the end user isauthenticated via secure form-based authentication, if:• it has been selected on the Hybrid User Identification page, and• the user agent or application requesting authentication supports form-basedauthentication via an HTML page.Applications that do not support form-based authentication use either NTLMidentification or basic authentication. Basic authentication is always used ifAlways authenticate users on first access is selected and none of the otheroptions are either selected or available.You can also enforce a specific authentication option for certain end users, forexample all users in a branch office, by deploying a PAC file URL in the followingformat:http://hybrid-web.global.blackspider.com:8082/proxy.pac?a=X324 Websense Web Security Solutions