D-Link DFL-2500 User Guide - Page 161

142 Chapter 17. User Authentication Note 1. HTTP authentication will collide with WebUI's remote management service which also uses TCP port 80. To avoid this, please change WebUI port in Advanced Settings for Remote Management before proceeding the authentication configuration, for example, using port 81 instead. 2. In HTTP(s) Agent Options, there are two login types available, HTMLForm and BasicAuth. The problem with BasicAUTH is that Web browsers cache the username and password entered in the 401- Authentication Required dialog. This is normally no problem if the browser is closed down, as it then clears the cache; but for systems with the browser imbedded in the operating system, the cache is harder to clear. Therefore, HTMLForm is recommended. A Realm String can be defined to be shown in the 401- Authentication Required dialog for BasicAUTH option. 3. Timeout can be adjusted in User Authentication → User Authentication Rules → Restrictions. The options are Idle Timeout and Session Timeout. • Idle Timeout: If a user has successfully been authenticated, and no traffic has been seen from his IP address for this number of seconds, he/she will automatically be logged out. The value is 1800 by default. • Session Timeout: If a user has successfully been authenticated, he/she will automatically be logged out after this many seconds, regardless of if the firewall has seen activity from the user or not. • Use timeouts received from the authentication server checkbox: Some RADIUS servers can be configured to return idle-timeout and session values. If this checkbox is selected, the firewall will try to use these timeouts, prior to the timeout values specified above. If no timeouts are received from the authentication server, the timeout values specified above will be used. 4. Another Restrictions configuration is the Multiple Username Logins. Three options are available as explained below: D-Link Firewalls User's Guide