Cisco Cisco Web Security Appliance S360 Guia Do Utilizador

In the Cisco Web Security Appliance web interface, choose Network > Authentication.

Click Add Realm. 

Assign a unique name to the authentication realm using only alphanumeric and space characters.

Select Active Directory in the Authentication Protocol field.

Enter up to three fully-qualified domain names or IP addresses for the Active Directory server(s).

Example: 

ntlm.example.com

. 

An IP address is required only if the DNS servers configured on the appliance cannot resolve the Active 
Directory server hostname.

When multiple authentication servers are configured in the realm, the appliance attempts to authorize 
with up to three authentication servers before failing to authorize the transaction within this realm.

Join the appliance to the domain:

Configure the Active Directory Account:

Click Join Domain.

Provide login credentials (user name and passphrase) for the account on the Active Directory, and 
click Create Account.

Active Directory Domain

The Active Directory serve3r domain name. Also known as a DNS Domain 
or realm. 

NetBIOS domain name

If the network uses NetBIOS, provide the domain name. 

If this option is not available use the 

 CLI 

command to verify that the NTLM security mode is set to “domain.” 

Computer Account

Specify a location within the Active Directory domain where AsyncOS 
will create an Active Directory computer account, also known as a 
“machine trust account”, to uniquely identify the computer on the domain. 

If the Active Directory environment automatically deletes computer 
objects at particular intervals, specify a location for the computer account 
that is in a container, protected from automatic deletion.