Web Gateway 7.1.5 Product Guide - McAfee

5
Authentication and access management
Cookie authentication
Cookie Authentication at HTTP(S) Proxy
This nested rule set handles cookie authentication for users when the Authentication Server method is
not applied.
Nested library rule set — Cookie Authentication at HTTP(S) Proxy
Criteria — Authentication.IsServerRequest equals false AND
(Connection.Protocol equals “HTTP” or Connection.Protocol equals “HTTPS”) AND
Command.Name does not equal “CONNECT” AND Command.Name does not equal “CERTVERIFY”
Cycle — Requests (and IM)
The rule set criteria specifies that the rule set applies when a user sends a request under the HTTP or
HTTPS protocol and the request is not one for opening a connection or verifiying a certificate, as can be
sent in SSL-secured communication, while the Authentication Server method is not required for
authenticating the user.
The following rule sets are nested in this rule set:
• Set Cookie Authentication for Authenticated Clients
• Authenticate Clients with Authentication Server
Set Cookie for Authenticated Clients
This nested rule set handles the setting of cookies for users once they have been successfully
authenticated.
Nested library rule set — Set Cookie for Authenticated Clients
Criteria — Authentication.IsLandingOnServerLanding equals true
Cycle — Requests (and IM)
The rule set criteria specifies that the rule set applies when a user who sent a request from a client has
been successfully authenticated.
The rule set contains the following rule:
Set cookie and redirect client to the requested URL
Always –> Redirect
The rule sets a cookie for a user who has been successfully authenticated and redirects the request
the user sent from a client to the appropriate web server .
The action settings specify a redirect message that is sent to the user.
Processing continues with the next rule set.
Authenticate Clients With Authentication Server
This nested rule set asks users to authenticate if no valid cookie could be found for them and directs
them to the authentication server.
Nested library rule set — Authenticate Clients With Authentication Server
Criteria — Always
Cycle — Requests (and IM)
The rule set contains the following rule:
Redirect clients that do not have a valid cookie to the authentication server
Authentication.Authenticate equals false –>
Authenticate
144 McAfee Web Gateway 7.1.5 Product Guide