Back=right
mouse click.
Back=right
mouse click.
IWSVA supports the use of guest policies to allow users who log in to the network, but are not found in the LDAP, to still fall under the aegis of IWSVA scanning and content policy.
Guest policies are available for HTTPS decryption, Advanced Threat Protection ,HTTP Inspection, Data Loss Prevention, Applets and ActiveX security, and URL Filtering.
For example, say a guest user logs in using credentials from a part of the corporate network that is not covered by the local LDAP server for example, someone from the German office logging in locally to the US office.
The following rules and conditions apply:
IWSVA needs to be configured for User/group name authentication (LDAP) in the Administration > IWSVA Configuration > User Identification | User Identification tab.
Enable guest account must be selected in the Administration > IWSVA Configuration > User Identification | User Identification page, and enable Captive Portal.
Guest policies always take the highest priority for guest user—if a guest is also included in any policy other than the guest policy, the guest policy will apply to the guest.