Cisco Cisco Web Security Appliance S170 사용자 가이드

 describes the authentication options for the 

advancedproxyconfig

 CLI command.

When would you like to 
forward authorization 
request headers to a 
parent proxy?

Never, 
Always, 
Only if not 
used by 
the WSA

Never

Yes

This setting determines whether 
the Web Proxy includes the 
“Proxy-Authorization” header to 
upstream servers, including 
proxies.

Enter the Proxy 
Authorization Realm to 
be displayed in the end 
user authentication 
dialog

String

“Cisco 
IronPort 
Web 
Security 
Appliance”

No

Proxy Authorization Realm 
displayed in the End User 
Authentication dialog.

Would you like to log the 
username that appears in 
the request URI?

Yes, No

(Boolean)

No

No

If enabled, ‘<username>:xxxxx’ 
is logged i.e the username is 
displayed and the password is 
represented as a string, ‘xxxxx’. 
If disabled, both username and 
password are stripped. Note that 
the actual password is never 
displayed regardless of the value 
of this variable.

Should the Group 
Membership attribute be 
used for directory 
lookups in the Web UI 
(when it is not used, 
empty groups and groups 
with different 
membership attributes 
will be displayed)?

Yes, No

(Boolean)

No

No

Choose whether or not AsyncOS 
should use the group membership 
attribute when doing a directory 
lookup.

If you do not want to display 
empty authentication groups and 
fetch groups whose group 
membership attribute is different, 
choose Yes.

Would you like to use 
advanced Active 
Directory connectivity 
checks?

Yes, No

(Boolean)

No

No

Choose whether or not the Web 
Proxy should automatically 
restart the internal authentication 
process that communicates with 
Active Directory servers when it 
becomes unresponsive, but is still 
running.

Would you like to allow 
case insensitive 
username matching in 
policies?

Yes, No

(Boolean)

Yes

Yes

Choose whether or not the Web 
Proxy should ignore case when 
matching user names against the 
policy groups.