Cisco Cisco Web Security Appliance S670 Mode D'Emploi

22-9

AsyncOS 9.1 for Cisco Web Security Appliances User Guide

Chapter 22 Perform System Administration Tasks

Administering User Accounts

If the user does not exist on any external server or on the appliance, or if the user enters the wrong
passphrase, access to the appliance is denied.

Enabling External Authentication Using RADIUS

Step 1

On the System Administration > Users page, click Enable External Authentication.

Step 2

Choose RADIUS as the Authentication Type.

Step 3

Enter the host name, port number, and Shared Secret passphrase for the RADIUS server. Default port
is 1812.

Step 4

Enter the number of seconds the appliance is to wait for a response from the server before timing out.

Step 5

Choose the authentication protocol used by the RADIUS server.

Step 6

(Optional) Click Add Row to add another RADIUS server. Repeat steps

–

for each RADIUS server.

Note

You can add up to ten RADIUS servers.

Step 7

In the External Authentication Cache Timeout field, enter the number of seconds AsyncOS stores the
external authentication credentials before contacting the RADIUS server again to re-authenticate.
Default is zero.

Note

If the RADIUS server uses one-time passphrases, for example passphrases created from a token,
enter zero (0). When the value is set to zero, AsyncOS does not contact the RADIUS server again
to authenticate during the current session.