Cisco Cisco Web Security Appliance S160 Guía Del Usuario
5-33
AsyncOS 8.8 for Cisco Web Security Appliances User Guide
Chapter 5 Acquire End-User Credentials
Credentials
For information about the Redirect Hostname, see
, or the CLI
command
Authentication and Authorization Failures
If authentication fails for accepted reasons, such as incompatible client applications, you can grant
guest access.
guest access.
If authentication succeeds but authorization fails, it is possible to allow re-authentication using a
different set of credentials that may be authorized to access the requested resource.
different set of credentials that may be authorized to access the requested resource.
Related Topics
•
•
Credential Format
Credential Encryption for Basic Authentication
About Credential Encryption for Basic Authentication
Enable credential encryption to transmit credentials over HTTPS in encrypted form. This increases
security of the basic authentication process.
security of the basic authentication process.
The Web Security appliance uses its own certificate and private key by default to create an HTTPS
connection with the client for the purposes of secure authentication. Most browsers will warn users,
however, that this certificate is not valid. To prevent users from seeing the invalid certificate message,
you can upload a valid certificate and key pair that your organization uses.
connection with the client for the purposes of secure authentication. Most browsers will warn users,
however, that this certificate is not valid. To prevent users from seeing the invalid certificate message,
you can upload a valid certificate and key pair that your organization uses.
Configuring Credential Encryption
Before You Begin:
•
Configure the appliance to use IP surrogates.
•
(Optional) Obtain a certificate and unencrypted private key. The certificate and key configured here
are also used by Access Control.
are also used by Access Control.
Step 1
Choose Network > Authentication.
Step 2
Click Edit Global Settings.
Authentication Scheme
Credential Format
NTLMSSP
MyDomain\jsmith
Basic
jsmith
MyDomain\jsmith
Note
If the user does not enter the Windows domain, the Web Proxy
prepends the default Windows domain.
prepends the default Windows domain.