Assigning Iprism Profiles To Windows Ad Global Groups; Microsoft Windows Active Directory Authentication (Active Directory 2008); Prerequisites - EdgeWave iPrism Web Security Administration Manual

iPrism
Type the IP addresses of the domain controllers you wish to use in the Domain Controllers field.
8.
Multiple IP addresses must be separated by commas.
Click Join.
9.
Save your configuration by clicking Save.
10.
If all settings are correct and the join was successful, under Authentication Mode & Status, you
11.
will see the authentication mode, the status (e.g., joined) and whether the iPrism is connected.
Set up your clients' browsers. For instructions on specific browsers, see:
12.
• Configuring Firefox for Proxy Mode
• Configuring Safari (Mac OS X only) for Proxy Mode
• Configuring Internet Explorer for Proxy Mode
Important: Users must proxy to iPrism's fully qualified domain name, not the IP
address.

Assigning iPrism Profiles to Windows AD Global Groups

Refer to Groups.

Microsoft Windows Active Directory Authentication (Active Directory 2008)

iPrism now supports authentication using Kerberos against the Windows Active Directory 2008
domain. For a visual representation of how Active Directory 2008 works in the iPrism environment,
see below. For a description of how the Active Directory (AD) environment works in general, refer to
the iPrism Knowledgebase at
To set up your iPrism to authenticate against an Active Directory 2008 server, you must have the
following prerequisities in place, then complete the steps below .

Prerequisites

• You must know the iPrism's fully qualified domain name and IP address (in our example,
jdoe.sales.abc.com).
• This name must match the domain of the iPrism (in our example, jdoe.sales.abc.com).
• You must know the IP address of your AD2008 server (in our example, 10.1.1.57).
• You must know the NT domain (NetBIOS name); in our example, CORPSALES.
Chapter 7 System Settings
www.edgewave.com/support/web_security/knowledgebases.asp.
Administration Guide
107