User Authentication settings
Go to the Authentication Options tab to set parameters for authentication to the firewall.
Always require users to be authenticated ...
Enable this option to require user authentication any time an unauthenticated user attempts to open a Web page. This implies that the user will be automatically redirected to the authentication page if not authenticated yet (see chapter Firewall User Authentication) and the demanded Web page will be opened after a successful login.
If the option is disabled, user authentication will be required only for Web pages which are not available (are denied by URL rules) to unauthenticated users (refer to chapter URL Rules).
Note: User authentication is used both for accessing a Web page (or/and other services) and for monitoring of activities of individual users (the Internet is not anonymous).
Enable user authentication automatically ...
If the Microsoft Internet Explorer (version 5.01 or later) is used, the user can use automatic login (using NTLM). The following conditions are applied to this authentication method:
-
The server (i.e. the WinRoute host) belongs to a corresponding Windows NT or Kerberos 5 (Windows 2000/2003) domain.
-
Client host belongs to the domain.
-
User at the client host is required to authenticate to this domain (i.e. local user accounts cannot be used for this purpose).
-
WinRoute Firewall Engine is running as a service or it is running under a user account with administrator rights to the WinRoute host.
-
NTLM cannot be used for authentication in the internal database.
Automatically logout users when they are inactive
Time interval (in minutes) of allowed user inactivity. After this period expires, the user will be automatically logged out from the firewall. The default timeout value is 120 minutes (2 hours).
This situation often comes up when a user forgets to logout from the firewall. Therefore, it is not recommended to disable this option (or set the value to 0), otherwise login data of a user who forgot to logout might be misused by an unauthorized user.
