D-Link NetDefendOS

• The option IP virtualization per session must be enabled.
Note: DNS lookup is done using the terminal server IP
Any DNS lookups are performed using the IP of the Windows terminal server andnot the
session IP assigned to the client. Therefore, IP rules or IP policies may be needed to allow
such DNS lookups through the firewall.
Monitoring Identity Awareness Activity
The administrator can ask NetDefendOS to show details of identity awareness activity.
In the Web Interface, the administrator can go to Status > Run-time Information >
Authentication Agents to see that the IDA service is connected to NetDefendOS. In the CLI, the
same can be achieved with the command:
gw-world:/> authagent
As users are authenticated, they can be seen in the Web Interface by going to Status > Run-time
Information > User Authentication. In the CLI, the same can be achieved with the command:
gw-world:/> userauth -list
In order to switch on console monitoring of the communication taking place between
NetDefendOS and the IDA service on the domain server, use the command:
gw-world:/> authagentsnoop
Entering the command a second time will terminate snooping.
The options for all the above CLI commands are listed in the separate NetDefendOS CLI Reference
Guide.
Chapter 8: User Authentication
649