Managing Users and Objects
Quantum Spark 1500, 1600, and 1800 Appliances R81.10.X Locally Managed Administration Guide|266
l
You can configure the Browser-Based Authentication to appear for all traffic. This identification
method is commonly configured to appear when you access only specific network resources or
the Internet to avoid the overhead required from end users when they identify themselves.
l
For traffic that is not HTTP based, you can also configure that all unidentified users are blocked
from accessing the configured resources or Internet until they identify themselves first through
the Browser-Based Authentication.
n
Identity Collector - Collects information about identities and their associated IP addresses and sends
it to the Security Gateway for identity enforcement.
Note - In the R81.10.X releases, this feature is available starting from the R81.10.05 version.
Enabling User Awareness
1. Select the On or Off option.
Note - When the blade is managed by Cloud Services, a lock icon is shown. You cannot
toggle between the on and off states. If you change other policy settings, the change is
temporary. Any changes made locally are overridden in the next synchronization between
the gateway and Cloud Services.
2. Click the Configuration wizard link.
The User Awareness Wizard opens.
3. Select one or more user identification methods and click Next.
4. Follow the rest of the steps and click Finish.
5. After initial configuration, you can select the Active Directory Queries or Browser-Based
Authentication checkboxes under Policy Configuration and click Configure to configure more
advanced settings.
Active Directory Queries:
If you have an existing Active Directory server, click Use existing Active Directory servers.
To add a new Active DirectoryDomain:
1. Select Active Directory Queries and click Configure.
The Active Directory Queries window opens.
2. Select Define a new Active Directory server.
3. Enter:
n
Domain
n
IPv4 address
n
IPv6 address
n
User name
n
Password
To Next Page
