Cisco Cisco Web Security Appliance S380 User Guide

Submit and commit your changes.

Use re-authentication to allow users the opportunity to authenticate again, using different credentials, if 
the credentials they previously used have failed authorization. A user may authenticate successfully but 
still be prevented from accessing a web resource if not authorized to do so. This is because authentication 
merely identifies users for the purpose of passing their verified credentials on to policies, but it is the 
policies that authorize those users (or not) to access resources. 

A user must have authenticated successfully to be allowed to re-authenticate. 

To use the re-authentication feature with user defined end-user notification pages, the CGI script that 
parses the redirect URL must parse and use the Reauth_URL parameter. 

Choose Network > Authentication.

Click Edit Global Settings.

Check the Re-Authentication Prompt If End User Blocked by URL Category Or User Session 
Restriction check box.

Click Submit.

When the appliance is configured to use cookie-based authentication surrogates, it does not get cookie 
information from clients for HTTPS and FTP over HTTP requests. Therefore, it cannot get the user name 
from the cookie.

No Surrogate

Yes

Yes

Yes

NA

NA

NA