User Authentication For Internet Access - McAfee SG310 Administration Manual

Firewall menu options
Access control
[Optional] Select the Verbosely log accesses checkbox to enable logging of all access attempts.
4
Note: This option must be selected if you wish to configure your UTM Firewall for use with McAfee Firewall
Reporter, which provides reporting and real-time monitoring.
[Optional] Type the title to appear on block screens in the Custom Block Title field. Leave the field blank
5
to use the default block titles.
The Syslog Level controls the level of debug output to the system log. The higher the value, the more
6
verbose the output. For normal operation, this should be set to 0 since very large logs and a noticeable
system slowdown might result. For normal debugging, set to 1. Higher levels need only be turned on when
directed to by McAfee technical support.
• Default: 0
• Range: 0-5
Tip: if you need to increase the debugging level, you also need to either increase the local syslog buffer size, or
have remote logging enabled. See
[Optional] Select the Fast Web Mode checkbox to enable the UTM Firewall device to operate in Fast Web
7
Mode when possible. Fast Web Mode trades away the informative error pages when sites are blocked,
resulting in faster Web access than that provided by the software HTTP proxy. Once the Fast Web Mode
checkbox is selected, the UTM Firewall device will operate in Fast Web Mode whenever:
• There are no allow or deny Web lists defined.
• Web Filtering is not enabled.
• Web antivirus is not enabled.
The Web Proxy Port controls the TCP port number that the access control HTTP proxy listens on.
8
Typically you do not need to change this number unless you want to run another service on the UTM
Firewall appliance at this port number.
• Default: 81
• Range: 1-65535
Note: HTTPS (Secure Web) proxy access control mechanisms are not currently supported, other than those
provided for all other non-HTTP protocols.
[Optional] Set the length of time (in seconds) that an established connection can remain idle before it is
9
terminated in the Passthrough Idle Timeout field.
Default: 300
Caution: Setting the Passthrough Idle Timeout too high will impair the UTM Firewall units ability to service
WWW requests. Increasing the Passthrough Idle Timeout should only be undertaken at the request of
McAfee support.
Click Submit.
10
Disabling access control
From the Firewall menu, click Access Control > Main tab. The Authorizations setup page appears.
1
Clear all of the Enable Access Control checkboxes.
2
Click Submit.
3

User authentication for Internet access

When a user attempts to access a Web site on the Internet, the browser displays a dialog box similar to the
one shown in Figure 208.
McAfee UTM Firewall 4.0.4 Administration Guide
Configuring local system log settings and Enabling remote system logging.
207