Cisco Cisco Web Security Appliance S670 Release Notes

C I S C O   I R O N P O R T   A S Y N C O S   6 . 3 . 8   F O R   W E B   R E L E A S E   N O T E S

 

71

D O C U M E N T A T I O N   A D D E N D A

This section contains additions or changes to the printed documentation for the IronPort 
AsyncOS for Web User Guide

.

This section lists additional information to consider when configuring NTLMSSP 
Authentication.

Table 1-4 describes the authentication options for the 

advancedproxyconfig

 CLI 

command.

This section lists additional information to consider when using special characters in an LDAP 
authentication realm.

Table 1-4 describes the authentication options for the 

advancedproxyconfig

 CLI 

command.

Table 1-3 advancedproxyconfig CLI Command—Authentication Options 

Option

Valid 
Values

Default 
Value

Must Restart 
Web Proxy?

Description

Would you like to send 
Negotiate header along 
with NTLM header for 
NTLMSSP authentication:
1. Do not send Negotiate 
header
2. Send Negotiate header

1, 2

1

No

Choose whether or not to send the 
“Proxy-Authenticate: Negotiate” 
header when the Web Proxy uses 
NTLMSSP authentication.
You might want to send this header to 
maintain compatibility with older user 
agents. You might want to not send the 
header to allow .NET applications to 
work properly with NTLMSSP 
authentication.

Table 1-4 advancedproxyconfig CLI Command—Authentication Options 

Option

Valid 
Values

Default 
Value

Must Restart 
Web Proxy?

Description

Would you like to allow 
wild card matching with 
the character * for LDAP 
group names?

Yes, No
(Boolean)

Yes

Yes

Choose whether or not to match an 
asterisk as a wildcard in LDAP group 
filters.
When this option is disabled, using an 
asterisk (*) in the group filters for 
LDAP servers works as a literal string.