ZyXEL UAG715 User Guide - Page 224

Chapter 20 Web Authentication Figure 144 Authentication Policy Using Endpoint Security 20.1.1 What You Can Do in this Chapter Use the Configuration > Web Authentication screens (Section 20.2 on page 225) to create and manage web authentication policies. 20.1.2 What You Need to Know Web Authentication Policy and VPN Web authentication policies are applied based on a traffic flow's source and destination IP addresses. If VPN traffic matches an authentication policy's source and destination IP addresses, the user must pass authentication. Multiple Endpoint Security Objects You can set an authentication policy to use multiple endpoint security objects. This allows checking of computers with different OSs or security settings. When a client attempts to log in, the UAG checks the client's computer against the endpoint security objects one-by-one. The client's computer must match one of the authentication policy's endpoint security objects in order to gain access. Forced User Authentication Instead of making users for which user-aware policies have been configured go to the UAG Login screen manually, you can configure the UAG to display the Login screen automatically whenever it routes HTTP traffic for anyone who has not logged in yet. Note: This works with HTTP traffic only. The UAG does display the Login screen when users attempt to send other kinds of traffic. The UAG does not automatically route the request that prompted the login, however, so users have to make this request again. 224 UAG715 User's Guide