Cisco Cisco Web Security Appliance S170 Guia Do Utilizador

Página de 734
 
21-23
Cisco IronPort AsyncOS 7.5.7 for Web User Guide
 
Chapter 21      Authentication
Configuring Global Authentication Settings
Figure 21-9
Explicit Forward Proxy Mode Authentication Settings
Step 4
If the Web Proxy is deployed in explicit forward mode, edit the settings in 
Table 21-10
Explicit Forward Proxy Mode Authentication Settings 
Setting
Description
Credential Encryption
This setting specifies whether or not the client sends the login credentials to 
the Web Proxy through an encrypted HTTPS connection. To enable 
credential encryption, choose “H
TTPS Redirect (Secure)”. When you 
enable credential encryption, additional fields appear to configure how to 
redirect clients to the Web Proxy for authentication.
This setting applies to both Basic and NTLMSSP authentication schemes, 
but it is particularly useful for Basic authentication scheme because user 
credentials are sent as plain text.
For more information, see 
.
HTTPS Redirect Port
Specify a TCP port to use for redirecting requests for authenticating users 
over an HTTPS connection. 
This specifies through which port the client will open a connection to the 
Web Proxy using HTTPS. This occurs when credential encryption is enabled 
or when using SaaS Access Control and SaaS users are prompted to 
authenticate.