Symantec Security 5600 Series, Security 5400 Series,Clientless VPN 4400 Series, Administration Manual

Page: 255 / 861

254 Limiting user access
Authenticating with an external authentication server
■
PassGo Defender version 5 authentication
■
RSA SecurID authentication
When you create an authentication server, it is automatically reflected in the following security
gateway configurations:
■
As an available server when you create an authentication scheme
See
“Configuring an authentication scheme” on page 260.
■
On the Clientless VPN Roles tab, as a default user and default group role for the authentication
server
See
“Creating and assigning roles” on page 426.
Microsoft’s Active Directory authentication
Active Directory is an authentication system first introduced under Microsoft Windows 2000 that lets
organizations efficiently manage information about users and acts as a central authority for validating
user’s authentication information. The security gateway supports the use of an Active Directory server
as an external authority to authenticate connecting users.
Note:
All users that you want to authenticate through Active Directory must be a member of at least
one group in the Active Directory domain.
Prerequisites
None.
To create a new Active Directory authentication server record
1 In the SGMI, in the left pane, under Assets, click Authentication Servers .
2 In the right pane, on the Authentication Servers tab, click New >Active Directory .
3 In the Active Directory Properties dialog box, on the General tab, do the following:
4 Optionally, on the Description tab, type a more detailed description than you typed in the Caption
text box.
5
Click OK .
6 Optionally, do one of the following:
■
To save your configuration now and activate your changes later, on the toolbar, click Save .
■
To activate your configuration now, on the toolbar, click Activate .
When prompted to save your changes, click Yes .
Name Type the name to identify this authentication server.
Join gateway to the Active Directory domain To join this security gateway to the domain, check this option.
Primary domain controller Type the domain name of the primary domain controller.
Backup domain controller Type the domain name of the backup domain controller (if
applicable).
Administrator user name Type the name of the administrator for this authentication
server.
Administrator password Type the password of the administrator for this authentication
server.
Caption Type a brief description of the Active Directory server.