This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

AD authentication

Hi, quite new to Web Appliance. We use Firefox and have IP based authentication on at the moment. I believe AD auth is better but hear that only IE supports it, any ideas etc? Want to make sure I cover all angles before just turning AD auth on.

Many Thanks!

This thread was automatically locked due to age.

Red_Warrior over 5 years ago

Hi Zk1

The SWA officially supports FF, chrome, IE and Safari via SSO... there are some requirements and best practices.. Please see my KB here for everything you need to know https://community.sophos.com/kb/en-us/126599

for thinks like public wifi I generally recommend deploying a separate appliance generally without an authentication policy .. then lock it down via a generic default policy. this will ensure your not mixing public and private traffic. the VM is included so theres no additional costs.

Cheers
Cancel
Vote Up 0 Vote Down

Cancel
zk1 over 5 years ago in reply to Red_Warrior

Thanks Red Warrior!

Re the Firefox config, do you know if it can be done centrally / via policy or similar (so as not to manually configure hundreds of desktops)?
Cancel
Vote Up 0 Vote Down

Cancel
Red_Warrior over 5 years ago in reply to zk1

Most welcome,

If you are referring to pushing out proxy setting via gpo for ff.. Maybe something like this would help https://helpdesk.webtitan.com/support/solutions/articles/4000083786-configuring-firefox-proxy-settings-via-gpo but this involves building your own msi and deploying the pre-configured binary

Generally I would recommend pushing out via dhcp / .pac file for more configuration options (ie exclusions lists, dns/hostname look ups you can detect if the client is onsite vs offsite .. .etc) Its a little more difficult.. Unfortunately support can help much in creating a .pac file.. (if you need one done for you just talk to your account manager for professional services)

However I do have another lovely KB that should help.

NOTE:

(if your in transparent or bridge mode) theres no need for browser settings, just configure the lan router/wccp device to direct 80/443 from network x .. to appliance and then omit the appliance so that it can get out the gateway to the internet.

ELSE:

http://findproxyforurl.com/pac-functions (see the examples here to they are very good)

https://community.sophos.com/kb/en-us/38784

https://community.sophos.com/kb/en-us/38787

https://community.sophos.com/kb/en-us/38783

https://community.sophos.com/kb/en-us/38788

https://community.sophos.com/kb/en-us/38784
Cancel
Vote Up 0 Vote Down

Cancel
zk1 over 5 years ago in reply to Red_Warrior

Thanks again, much appreciated.
Cancel
Vote Up 0 Vote Down

Cancel