topic guys Authentication questions in Web Security

guys Authentication questions

kareem_alsawaf — Fri, 15 Mar 2013 15:27:12 GMT

I have a network with many subnets and i want to run the authentication based on the security groups in the Active directory, but i am confused how could i do the identity, how should i configure it.

should i ask authentication for all, but how could i specifiy the group in the Active Directory because i want to treat the users based on their groups??

And i want to run SSO also, could you help me with a detailed steps???

Thanks alot

guys Authentication questions

Jennifer Halim — Sun, 17 Mar 2013 21:37:44 GMT

Where exactly do you want to configure the authentication? ON ASA? WSA? ScanSafe Connector? and what are you trying to use the authentication for? Web traffic? IDFW? VPN?

guys Authentication questions

kareem_alsawaf — Sun, 17 Mar 2013 21:41:39 GMT

i want to configure it on the WSA and this authentication will be for Web traffic

guys Authentication questions

Jennifer Halim — Sun, 17 Mar 2013 21:53:50 GMT

Sure you can..

Here is the configuration guide for your reference:

http://www.cisco.com/en/US/docs/security/wsa/wsa7.5/user_guide/WSA_7.5.0_UserGuide.pdf

Authentication starts from chapter 20 (page: 20-1), and for SSO, you would need to use NTLM.

Hope that helps.

guys Authentication questions

kareem_alsawaf — Sun, 17 Mar 2013 21:57:55 GMT

I know the configuration Guide but i want a detailed Step by Step for the Identity and the Realm and the policy and the SSO. If you can help.

guys Authentication questions

Jennifer Halim — Sun, 17 Mar 2013 22:12:12 GMT

Well, the config guide provides you with detailed step by step information on how to configure each section

Of course it doesn't provide you with a specific scenario of how to configure the authentication then the identity, etc etc as there will be many different scenarios to configure it.

You can search the following knowledge based article for a more specific steps:

https://ironport.custhelp.com/

Example of article: How do I create Access Policy Groups that match Active Directory Groups?

https://ironport.custhelp.com/app/answers/detail/a_id/1295/kw/how%20to%20configure%20identity/related/1