McAfee MAP-3300-SWG - Web Security Appliance 3300, Product Manual

Page: 250 / 336

7 Configure the appliance to use Kerberos Authentication (Add a group).
a In the navigation bar, select
System
|
Users, groups and Services
|
Web user authentication
.
b
Under
User Authentication Services
, click
Add a group
. Type the
Group name
, for example, kerberos-group.
Select the kerberos-service for this group and click
OK
.
c
Click the green checkmark to apply the changes.
d
Select
Web
|
Web Configuration
|
HTTP
|
Connection Settings
.
e Under
User Authentication
, select
Enable user authentication
.
f
Select the Kerberos group, and click the green checkmark to apply the changes.
8
Configure the clients to use the appliance as a proxy server. Make the following configuration
changes in Internet Explorer on each client to redirect the browsers/workstations to the appliance:
a
Open Internet Explorer and select
Tools, Internet Options
.
b Click the
Connections
tab, then click
LAN Settings
. Type the IP address and the port for the appliance.
c
Click
Advanced
, add the FQDN of the appliance to the exception list, and click
OK
.
d Click the
Security
tab, select
Local Intranet
, and click
Sites
.
e
Click
Advanced
and add the FQDN of the appliance to this zone. Click
OK
, then click
Custom Level
and select
Automatic logon only in Intranet Zone
, and click
OK
. (The option is at the end of the scrolling
list.)
f
Click the
Advanced
tab, select
Enable Integrated Windows Authentication (requires restart)
, then click
OK
(The
option is near the end of the scrolling list.)
g Close and open the browser again. Try to access a website. If you are logged on to the domain,
the page opens successfully. If you are not logged on the Active Directory domain (for instance,
logged on locally or if using a Macintosh or Linux system), the following error is displayed on the
page:
401 error SCM Appliance <domain> Request for authentication Requesting authentication for
kerberos-group kerberos-service, type Kerberos kerberos-group kerberos-service
Virtual Hosting
Use these topics to gain an understanding of the options within the virtual hosting pages.
You can configure the virtual hosts and virtual networks that the appliance needs to scan.
Contents
Virtual Hosts
Virtual Networks
Virtual Hosts
Use this page to add, edit, or delete virtual hosts and show available virtual hosts.
System
|
Virtual Hosting
|
Virtual Hosts
Overview of System features
Virtual Hosting
250 McAfee Email and Web Security Appliances 5.6.0 Product Guide