Web Gateway 7.1.5 Product Guide - McAfee

Authentication and access management
Standard authentication 5
The rule set has also two rules of its own, which are processed before the nested rule sets:
Need to authorize Client IP?
Client.IP is in range list Unauthorized IPs –> Stop Rule Set
The rule uses the Client.IP property to check whether a request was sent from a client with an IP
address that is in the range list for unauthorized IP addresses. If this is the case, processing the
rule set stops. No activities are then carried out to authenticate a user. Processing continues with
the next rule set.
Note: This rule is not enabled by default.
Need to authorize URL?
URL is in list Unauthorized URLs –> Stop Rule Set
The rule uses the URL property to check whether a URL that access was requested is in the list of
unauthorized URLs. If this is the case, processing the rule set stops. No activities are then carried
out to authenticate a user. Processing continues with the next rule set.
Authenticate with User Database
This nested rule set asks unauthenticated users to authenticate. Its authentication method is retrieving
information from the internal user database.
Nested library rule set — Authenticate with User Database
Criteria — Authentication.IsAuthenticated equals false OR
Authentication.Failed equals false
Cycle — Requests (and IM)
The rule set criteria specifies that the rule set applies when a user has not yet been authenticated or
has undergone the authentication process, but authentication failed.
The rule set contains the following rule:
Authenticate with User Database
Authentication.Authenticate equals false –> Authenticate
The rule uses the Authentication.Authenticate property to check whether a user who sends a
request for web access is authenticated. The settings that go with the property are the settings of
the Authentication module. They specify that retrieving information from the internal user
database on the appliance is used as the authentication method.
If a user has not been authenticated by information from the internal database, the rule applies
and the Authenticate action is executed. Processing stops and a message is displayed, asking the
user to authenticate. The settings of the action specify that the message is displayed with default
values.
Processing continues when the next request is received on the appliance, which can be an
authentication request by the same user.
For information on how to modify the settings for the Authentication module to let the rule use a
different authenticaiion method, such as NTM, LDAP, or others, see Implement an authentication
method.
McAfee Web Gateway 7.1.5 Product Guide 125