Cisco Cisco Web Security Appliance S390 ユーザーガイド

ページ / 446
 
5-22
AsyncOS 8.5 for Cisco Web Security Appliances User Guide
 
Chapter 5      Acquire End-User Credentials
  Failed Authentication
Step 2
Click Edit Global Settings.
Step 3
Click the Permit Traffic To Proceed Without Authentication in the Action If Authentication Service 
Unavailable field.
Step 4
Submit and commit your changes.
Granting Guest Access After Failed Authentication
Granting guest access requires that the following procedures are completed:
1.
2.
3.
(Optional) 
Note
If an Identity allows guest access and there is no user-defined policy that uses that Identity, users who 
fail authentication match the global policy of the applicable policy type. For example, if MyIdentity 
allows guest access and there is no user-defined Access Policy that uses MyIdentity, users who fail 
authentication match the global Access Policy. If you do not want guest users to match a global policy, 
create a policy above the global policy that applies to guest users and blocks all access.
Define an Identity that Supports Guest Access
Step 1
Choose Web Security Manager > Identities.
Step 2
Click Add Identity to add a new identity, or click the name of an existing identity that you wish to use.
Step 3
Check the Support Guest Privileges check box.
Step 4
Submit and commit your changes.
Use an Identity that Supports Guest Access in a Policy
Step 1
Choose a policy type from the Web Security Manager menu.
Step 2
Click a policy name in the policies table.
Step 3
Choose Select One Or More Identities from the Identities And Users drop-down list (if not already 
chosen).
Step 4
Choose an identity that supports guest access from the drop-down list in the Identity column.
Step 5
Click the Guests (Users Failing Authentication) radio button.
Note
If this option is not available it means the identity you chose is not configured to support guest 
access. Return to step 
 and choose another, or see 
 to define a new one.