Cisco Cisco Web Security Appliance S670 User Guide

I R O N P O R T A S Y N C O S 6 . 3 F O R W E B U S E R G U I D E

Should the Group
Membership attribute be
used for directory lookups
in the Web UI (when it is
not used, empty groups
and groups with different
membership attributes
will be displayed)?

Yes, No
(Boolean)

Choose whether or not AsyncOS
should use the group membership
attribute when doing a directory
lookup.
If you do not want to display empty
authentication groups and fetch
groups whose group membership
attribute is different, choose Yes.

Would you like to enable
referrals for LDAP?

Yes, No
(Boolean)

Yes

Choose whether or not the Web
Proxy should perform LDAP
queries on a referred LDAP server.
You might want to disable this
option if a referred LDAP server is
unavailable to the Web Security
appliance.

Would you like to enable
secure authentication?

Yes, No
(Boolean)

Yes/No
(Web Proxy
restarts when it
needs to
listens on
fewer or
additional
ports)

Choose whether or not the Web
Proxy redirects clients to securely
pass authentication credentials to
the Web Proxy using HTTPS.
For more information on this
feature, see “Sending
Authentication Credentials
Securely” on page 363.

Would you like to use
surrogates for explicit
forward mode requests?

Yes, No
(Boolean)

Choose whether or not to configure
surrogate properties when the
appliance is deployed in explicit
forward mode even when secure
authentication is not enabled.
When you choose Yes, the CLI
presents additional options you can
configure.
Note: This option only appears
when you disable secure
authentication.

Table 5-3 advancedproxyconfig CLI Command—Authentication Options (Continued)

Option

Valid
Values

Default
Value

Must Restart
Web Proxy?

Description