Web Gateway 7.1.5 Product Guide - McAfee

5
Authentication and access management
Standard authentication
Authorize
The Authorize rule set allows only requests from users who are members of a whitelisted user group.
Nested library rule set — Authorize
Criteria — Always
Cycle — Requests (and IM)
The rule set contains the following rule:
Only allow users of Allowed User Groups
Authentication.UserGroups none in list Allowed User Groups –> Block
The rule uses the Authentication.UserGroups property to allow only users access who are members
of a group on the specified whitelist. If a user is not in one of the groups on the list, the rule
applies and stops processing of all rules. The request is not passed on to a web server and blocked
this way.
The action settings specify that a notification is sent to the requesting user. Processing continues
when the next request is received.
Implement an authentication method
If you do not want to keep the User Database authentication method, which is used by default in a rule
of the Authentication and Authorize rule set, you can implement a different authentication method,
such as NTLM, LDAP, and others. This section tells you how to modify the rule to implement this
change.
To implement a different authentication method:
1 Go to Policy | Rule Sets.
2 On the rule sets tree, go to the rule set that contains rules for authenticating users, for example, the
default Authentication and Authorize rule set and select the nested Authenticate with User
Database rule set. The rules of the nested rule set appear on the settings pane.
3 Select the rule Authenticate with User Database and in the rule criteria click User Database.
The Edit Settings window opens.
4 From the list provided under Authentication Method, select an authentication method, for
example, NTLM.
5 Configure common and specific parameters for the selected method as needed. When you are done,
click OK to close the window.
6 Click Save Changes.
Note: It is recommended that after changing the authentication method, you rename the settings of the
Authentication module, the authentication rule, and the nested rule set, accordingly.
For example, after selecting NTLM, rename the settings to NTLM and both the rule and the nested rule set
to Authenticate with NTLM.
Instead of renaming the default settings, you can also keep several settings with different names and
parameter values for the Authentication module
For more information on the settings you can configure for authenticating users, see Module for
authenticating users.
126 McAfee Web Gateway 7.1.5 Product Guide