Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 8 replies
  • Subscribers 1 subscriber
  • Views 1641 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Policy Issue when using Agent Authentication

jdobiash
We are messing around with having a few specific machines using the Agent Authentication.   I accomplished this by creating a Network Group Object that has just those specific machines in it and then creating a Profile that applies only to those machines.  The profile seems to work, however it doesn't appear to process any of the policies within it, except for the base profile.  We have a policy that is supposed to be applied if the user is a member of a group and give them a different filter.  This works when using AD SSO authentication.   It even says it should work when I put everything into the 'Policy Test" tab, but the logs still show the default policy being applied.

Any thoughts?   Below is an entry from the log and the screenshot from the policy test.

--------------------------
2014:08:04-11:51:52 utm-1 httpproxy[15900]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.0.10.113" dstip="23.209.26.231" user="testuser" statuscode="200" cached="0" profile="REF_HttProContaInterNetwo4 (Agent Authentication)" filteraction="REF_DefaultHTTPCFFAction (Global Web Filter)" size="15228" request="0xb04e7320" url="www.msnbc.com" exceptions="" error="" authtime="3" dnstime="1144522" cattime="32129" avscantime="47016" fullreqtime="1266090" device="0" auth="6" category="134" reputation="neutral" categoryname="General News" content-type="text/html" application="http"
---------------------------


This thread was automatically locked due to age.
Parents
  • 0
    So if I make a policy that applies to the entire "Active Directory Users" group, then it works.  It's not working when it only applies to a specific group.   If I add the user directly on the UTM (linked to AD) that works too, but that's really not a viable option.  What's the point of having the ability to use AD if it's not going to work for group memberships?  

    Again, this all works with AD SSO authentication.
Reply
  • 0
    So if I make a policy that applies to the entire "Active Directory Users" group, then it works.  It's not working when it only applies to a specific group.   If I add the user directly on the UTM (linked to AD) that works too, but that's really not a viable option.  What's the point of having the ability to use AD if it's not going to work for group memberships?  

    Again, this all works with AD SSO authentication.
Children
No Data