XnetSolutions SX-GATE, Руководство пользователя

Страница: 399 / 480

14.7.1 Settings 399
Deny multiple logins of the same user
This option will link a user login for 10 minutes to the source IP address of the user's
last successful access. If during this period of time, the same login is used by another
IP address, it may be possible that the user has forwarded his credentials. Therefore
access will be blocked.
14.7.1-G PAC file
In both, the browser's proxy settings and the Active Directory group policies, you
can enter the address of a proxy autoconf file (PAC file). SX-GATE's administration
webserver provides a suitable file. Fill in the following URL if you want to use it: "http://
<SX-GATE's LAN IP>:8000/proxy.pac".
The PAC file provided by SX-GATE makes the browser use SX-GATE's web proxy
for all connections except for connections to the local host running the browser (IP
127.0.0.1 or primary IP of that host), connections to SX-GATE (LAN IP or fully qualified
hostname according to "System > Setup") and connections to unqualified hostnames
(i.e. plain hostnames without a domain). Use the following settings to add further
exceptions.
Connection to destination domain
Use this list to configure by domain whether the browser should use the proxy or
connect directly. The order of the entries is important. Note that you can as well enter
individual IP addresses. However there's no DNS resolution, so this will only affect
connections where an explicit IP from the list has been entered as destination in the
browser.
Direct connections for networks
The browser will open direct connections to hosts with an IP address from the networks
in this list. The proxy will not be used for these connections. Most of the time not an
IP address but a hostname is given as a connection's target. So the browser has to
lookup the IP address corresponding to each hostname using DNS queries.
If only a few individual servers are addressed by IP, you should
consider entering these addresses in the list "Connection to
destination domain" instead. As long as there's no entry in the
list here, the browser doesn't need to query DNS servers.
Proxy address in cluster mode
Please select the proxy address advertised by master and backup in cluster mode.