NTLM Authentication
Administrators can utilize the NTLM authentication mechanism used by Windows operating systems to help authenticate users with WinGate.
This form of authentication requires the Operating System(Windows) database option to be in use in WinGate.
Both the WinGate Internet Client (WGIC) and Gatekeeper authentication methods support using NTLM.
Unfortunately it is not compatible with Java Authentication method.
To use NTLM with WGIC or GateKeeper Authentication:
- Make sure WinGate is set to use the Operating system Database(Windows) user database.
- Configure clients to use either WGIC Authentication or GateKeeper Authentication.
- Users will need to log in using a valid Username and password from the chosen Operating System database.
- Once authenticated in WinGate, users will appear on the Activity tab in GateKeeper as Authenticated NTLM.
Using Proxies with NTLM
Clients with browsers that support NTLM (Internet Explorer other Windows based browsers) when set to use a Proxy Server can be authenticated via NTLM with WinGate.
This can be useful in an Active Directory situation where group policy can be centrally set on the browser configuration settings (namely setting what the default proxy server (WinGate) is).
As this group policy can be set to affect all browsers across the network, it provides an easy implementation of authentication and control of Internet access without the need for individual client configuration, as all clients will now be authenticated via NTLM through WinGate.
To use NTLM with Proxy clients through WinGate:
On the Server:
- Open GateKeeper.
- Log on as Administrator.
- Select the WWW proxy service from the Services tab on the GateKeeper control panel.
- Select the General configuration.
- Under the Authentication where required by policies, select the NTLM checkbox.
- Select the Policy configuration.
- Click Add to add recipients to be affected.
- On the Recipient properties configuration General tab select User must be authenticated.
- Click OK
- Depending on requirements set the Default rights(System Policies) setting on the main Policy configuration window to are ignored.
- Click OK.
On the Client :
- Set the browser to use a Proxy Server (obviously the IP address of the WinGate Server)
- Depending on the browser used, you can set the browser security settings for user authentication to Use current Windows Username and Password. This will save the user having to enter their Username and password everytime the open a browser session. Obviously this must be a valid Windows user and password in the database that WinGate has been set to use.
