Using The Dmz Wizard To Configure The Dmz Settings - Cisco ISA500 Series Administration Manual

Wizards

Using the DMZ Wizard to Configure the DMZ Settings

STEP 6
Using the DMZ Wizard to Configure the DMZ Settings
Cisco ISA500 Series Integrated Security Appliance Administrator Guide
- Internal: Allows you to use the default web authentication login page to
authenticate the wireless users. If you choose this option, enter the URL
of the portal in the Redirect URL After Login field and specify the
monitored HTTP port list. If you do not specify the portal, the wireless
user can access the original web site directly.
- External Web Server: Allows you to use a customized web
authentication login page on an external web server to authenticate the
wireless users. If you choose this option, enter the IP address of the
external web server in the Authentication Web Server field and the key
in the Authentiation Web Key field. The authentication web key is used
to protect the user name and password that the external web server
sends to your security appliance for authentication.
For example, if you select Internal for authentication and the web portal
is set to www.ABcompanyC.com, when a wireless user tries to access
the website www.google.com, the default web authentication login page
opens. The user needs to enter the user name and password, and then
click Submit. After login, the user is directed to the
www.ABcompanyC.com and can then access the www.google.com.
In the Advanced Settings area, enter the following information:
• VLAN Mapping: Choose the VLAN to which the SSID is mapped. All traffic
from the wireless clients that are connected to this SSID will be directed to
the selected VLAN.
• User Limit: Specify the maximum number of users that can simultaneously
connect to this SSID.
Use the DMZ Wizard to configure the DMZ and DMZ services if you need to host
public services. It includes the following sections:
• Using the DMZ Wizard to Configure the DMZ Settings, page 47
• Configuring the DMZ, page 48
• Configuring the DMZ Services, page 49
2
46