Cisco Cisco Web Security Appliance S170 사용자 가이드

Configure Group Mapping:

Choose whether to map all externally authenticated users to the Administrator role or to different 
appliance user role types.

If you map users to different role types, enter the group name as defined in the RADIUS CLASS attribute 
in the Group Name or Directory field, and choose an appliance role type from the Role field. You can 
add more role mappings by clicking Add Row.

For more information on user role types, see 

.

Submit and commit your changes.

Local users can define preference settings, such as language, specific to each account. These settings 
apply by default when the user first logs into the appliance. The preference settings are stored for each 
user and are the same regardless from which client machine the user logs into the appliance. 

When users change these settings but do not commit the changes, the settings revert to the default values 
when they log in again.

Map externally authenticated 
users to multiple local roles.

AsyncOS assigns RADIUS users to appliance roles based on the 
RADIUS CLASS attribute. CLASS attribute requirements:

3 character minimum

253 character maximum

no colons, commas, or newline characters

one or more mapped CLASS attributes for each RADIUS user 
(With this setting, AsyncOS denies access to RADIUS users 
without a mapped CLASS attribute.) 

For RADIUS users with multiple CLASS attributes, AsyncOS 
assigns the most restrictive role. For example, if a RADIUS user 
has two CLASS attributes, which are mapped to the Operator and 
Read-Only Operator roles, AsyncOS assigns the RADIUS user to 
the Read-Only Operator role, which is more restrictive than the 
Operator role.

These are the appliance roles ordered from least restrictive to most 
restrictive:

Administrator 

Operator

Read-Only Operator

Guest

Map all externally authenticated 
users to the Administrator role.

AsyncOS assigns RADIUS users to the Administrator role.