cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
734
Views
0
Helpful
1
Replies

uauth and proxy (PIX 515E 6.3)

s.musialik
Level 1
Level 1

I need some help with uauth usage. How to prevent from unauthorized access if someone is using proxy. For example user A need to access page A and is authorized to do this. user A goes throught proxy server. When user A is out of office (still logged in) user B (unauthorized to access page A) can open page A without need of authentication (for example timeout uauth is set: 0:0:0 absolute and 0:1:0 inactivity). Is there any possibility to use in addition to verification port numbers ? PIX after show uauth shows if 2 users use proxy 1.1.1.1:

user 'A' at 1.1.1.1, authorized to: (idle for 0:21:29)

Of course user B using the same proxy will not be listed after show uauth - becase there is not need to authorize this user (first was user A).

Is there any possibility to authenticate and authorize everyone - with proxy like separate session ?

1 Reply 1

smahbub
Level 6
Level 6

http://www.cisco.com/en/US/products/sw/secursw/ps2120/products_command_reference_chapter09186a0080104256.html#32763

currently on the PIX there is only one way to do this with the command

timeout uauth

uauth hh:mm:ss

Duration before authentication and authorization cache times out and user has to reauthenticate next connection. This duration must be shorter than the xlate values. Set to 0 to disable caching.