Blue Coat Systems Time Clock Proxy SG Instrukcja Użytkownika Pobierz pdf (Strona 161)

100

101

Chapter 4: Property Reference

161

url.domain = !corporate.com authenticate(OurRealm, “log in for internet access”)

The next example illustrates the relation between authentication and denial. All users outside an

allowed subnet are denied before authentication. They are not allowed to submit credentials to the

authentication server. Users within the allowed subnet are authenticated regardless of whether they

will eventually be allowed or denied, so their user names are available for the access log.

define allowed_source_ip

10.1.2.0/24 ; my subnet(s)

;...

end

<proxy>

authenticate( myrealm )

<proxy>

deny client.address=!allowed_source_ip ; denied before authentication

authenticate.force(yes) ; all others denied after

<proxy>

deny category=(Sports, Gambling) ; would deny before auth except for force.

Komentarze do niniejszej Instrukcji

Brak uwag

Blue Coat Systems Time Clock Proxy SG Instrukcja Użytkownika Strona 161

Komentarze do niniejszej Instrukcji