Cisco Cisco Web Security Appliance S690 User Guide

Enter the surrogate 
timeout for machine 
credentials.

Time in 
seconds

10

No

This setting specifies how long 
the IP address surrogate used for 
machine credentials (instead of 
user credentials) can be used 
before requiring authentication. 
You might want to configure this 
value if the network contains 
users on Windows 7 or Windows 
Vista machines that use the 
Network Connectivity Status 
Indicator (NCSI) feature. 

For more information, see 

Enter re-auth on request 
denied option [disabled / 
embedlinkinblockpage]?

disabled/ 
embedlink
inblockpa
ge

disabled

No

This setting allows users to 
authenticate again if the user is 
blocked from a website due to a 
restrictive URL filtering policy. 

The user sees a block page that 
includes a link that allows them to 
enter new authentication 
credentials. If the user enters 
credentials that allow greater 
access, the requested page 
appears in the browser.

Note: This setting only applies to 
authenticated users who are 
blocked due to restrictive URL 
filtering policies. It does not 
apply to blocked transactions by 
subnet with no authentication.

For more information, see 

.