Cisco Cisco Web Security Appliance S660 Mode D'Emploi
5-30
AsyncOS 9.0 for Cisco Web Security Appliances User Guide
Chapter 5 Acquire End-User Credentials
Failed Authentication
Step 1
Choose Network > Authentication.
Step 2
Click Edit Global Settings.
Step 3
Click the Permit Traffic To Proceed Without Authentication in the Action If Authentication Service
Unavailable field.
Unavailable field.
Step 4
Submit and commit your changes.
Granting Guest Access After Failed Authentication
Granting guest access requires that the following procedures are completed:
1.
2.
3.
(Optional)
Note
If an Identification Profile allows guest access and there is no user-defined policy that uses that
Identification Profile, users who fail authentication match the global policy of the applicable policy type.
For example, if MyIdentificationProfile allows guest access and there is no user-defined Access Policy
that uses MyIdentificationProfile, users who fail authentication match the global Access Policy. If you
do not want guest users to match a global policy, create a policy above the global policy that applies to
guest users and blocks all access.
Identification Profile, users who fail authentication match the global policy of the applicable policy type.
For example, if MyIdentificationProfile allows guest access and there is no user-defined Access Policy
that uses MyIdentificationProfile, users who fail authentication match the global Access Policy. If you
do not want guest users to match a global policy, create a policy above the global policy that applies to
guest users and blocks all access.
Define an Identification Profile that Supports Guest Access
Step 1
Choose Web Security Manager > Identification Profiles.
Step 2
Click Add Identification Profile to add a new identity, or click the name of an existing identity that you
wish to use.
wish to use.
Step 3
Check the Support Guest Privileges check box.
Step 4
Submit and commit your changes.
Use an Identification Profile that Supports Guest Access in a Policy
Step 1
Choose a policy type from the Web Security Manager menu.
Step 2
Click a policy name in the policies table.
Step 3
Choose Select One Or More Identification Profiles from the Identification Profiles And Users
drop-down list (if not already chosen).
drop-down list (if not already chosen).
Step 4
Choose a profile that supports guest access from the drop-down list in the Identification Profile column.
Step 5
Click the Guests (Users Failing Authentication) radio button.