Cisco Cisco Content Security Management Appliance M1070 Mode D'Emploi
11-61
Cisco IronPort AsyncOS 7.2.0 for Security Management User Guide
OL-21768-01
Chapter 11 Common Administrative Tasks
Figure 11-19
Enabling External Authentication Using LDAP
Step 3
Select the Enable External Authentication check box.
Step 4
Select LDAP for the authentication type.
Step 5
Select the LDAP external authentication query that authenticates users.
Step 6
Enter the number of seconds that the appliance waits for a response from the
server before timing out.
server before timing out.
Step 7
Enter the name of a group from the LDAP directory that you want the appliance
to authenticate, and select the role for the users in the group.
to authenticate, and select the role for the users in the group.
Step 8
Optionally, click Add Row to add another directory group. Repeat steps
for each directory group that the appliance authenticates.
Step 9
Submit and commit your changes.
Enabling RADIUS Authentication
AsyncOS does not obtain privilege information from the RADIUS directory.
Instead, the RADIUS directory provides authentication only, and AsyncOS grants
the administrator role to any user authenticated by the directory. You cannot
assign users to any other role when RADIUS external authentication is enabled.
Instead, the RADIUS directory provides authentication only, and AsyncOS grants
the administrator role to any user authenticated by the directory. You cannot
assign users to any other role when RADIUS external authentication is enabled.
It is important to remember that RADIUS authentication on the Security
Management appliance allows group mapping from certain RADIUS class
attributes to Security Management appliance roles.
Management appliance allows group mapping from certain RADIUS class
attributes to Security Management appliance roles.