Enabling Authentication Using Active Directory Services Parent topic

This is a global setting. If enabled, Active Directory authentication is enabled for all Active Directory domains configured for Deep Discovery Web Inspector Active Directory Services.
Note
Note
  • If global authentication is enabled, authentication is required for users in configured domains if their web traffic matches configured authentication policies.
    Deep Discovery Web Inspector uses authentication policies to judge how to authenticate. The authentication options are: none, standard mode, standard enforce mode, x-header mode.
    • If there is a match to a policy with none authentication mode or there is not a match to any authentication policies, authentication is performed using the IP address.
    • If a user belongs to a domain that is not configured in Deep Discovery Web Inspector Active Directory Services and he uses his domain to do authentication, the authentication fails.
    Managing Active Directory Services Domains
  • After global authentication is enabled, authentication policies determine how authentication is performed for individual users and clients (IP addresses).
    Configuring Global Authentication Settings
    Network objects are the criteria used to determine whether an authentication policy applies to users accessing web resources through the appliance. If a user attempts to access web resources from a client that is not a member of a network object in any of the authentication policies, user authentication is not used. Instead, authentication is performed using the IP address.
    Managing Authentication Policies

Procedure

  1. Go to Administration → Active Directory Services.
    The Active Directory Services screen appears.
    Important
    Important
    Before you proceed, consider the following: The following operation restarts the scan daemon and the authentication daemon, which interrupts daily traffic; therefore, this operation should be executed during non-working time:
  2. Click on Configure Global Authentication Settings.
    The Global Authentication Settings screen opens.
  3. Click on Enable global authentication to globally enable the use of Active Directory Services for authentication.
  4. Click Save.
    For more information about configuring other global authentication settings, see Configuring Global Authentication Settings.