Document Outline

• Contents
  • Chapter 1: Introduction 1
  • Chapter 2: Network Setup 33
  • Chapter 3: NT Authentication Setup 80
  • Chapter 4: LDAP Authentication Setup 97
  • Chapter 5: Assign/Set up Groups, Members 132
  • Chapter 6: Authentication Deployment 152
  • Chapter 7: Technical Support 196
  • Appendix A: Authentication Operations 199
  • Appendix B: Disable SMB Signing Requirements 262
  • Appendix C: Obtain, Export an SSL Certificate 268
  • Appendix D: LDAP Server Customizations 279
  • Appendix E: User/Group File Format and Rules 280
  • Appendix F: Override Pop-up Blockers 291
  • Appendix G: Glossary 302
  • Index 309
• Chapter 1: Introduction
  • About this User Guide
  • How to Use this User Guide
    • Conventions
    • Terminology
  • Filtering Elements
    • Group Types
      • Global Group
      • IP Groups
      • NT Domain Groups
      • LDAP Domain Groups
    • Filtering Profile Types
      • Static Filtering Profiles
        • Master IP Group Filtering Profile
        • IP Sub-Group Filtering Profile
        • Individual IP Member Filtering Profile
      • Active Filtering Profiles
        • Global Filtering Profile
        • NT/LDAP Group Filtering Profile
        • NT/LDAP Member Filtering Profile
        • LDAP Container Filtering Profile
        • Override Account Profile
        • Time Profile
        • Lock Profile
    • Filtering Profile Components
      • Library Categories
        • 8e6 Supplied Categories
        • Custom Categories
      • Service Ports
      • Rules
      • Minimum Filtering Level
      • Filter Settings
    • Filtering Rules
  • Authentication Solutions
    • R3000 Authentication Protocols
    • R3000 Authentication Tiers and Options
      • R3000 authentication tiers
      • R3000 authentication options
    • Authentication Solution Compatibility
    • Authentication System Deployment Options
    • Ports for Authentication System Access
    • Configuring the R3000 for Authentication
      • Configuration procedures
        • System section
        • Group section
• Chapter 2: Network Setup
  • Environment Requirements
    • Workstation Requirements
      • Administrator
      • End User
    • Network Requirements
  • Set up the Network for Authentication
    • Specify the operation mode
    • Specify the subnet mask, IP address(es)
      • Invisible mode
      • Router or firewall mode
    • Enable authentication, specify criteria
      • Net use based authentication
      • Web-based authentication
    • Enter network settings for authentication
    • Create an SSL certificate
      • Create, Download a Self-Signed Certificate
      • Create, Upload a Third Party Certificate
        • Create a Third Party Certificate
        • Upload a Third Party Certificate
        • Download a Third Party Certificate
    • View log results
    • Specify block page settings
      • Block Page Authentication
        • Block page
          • User/Machine frame
          • Standard Links
          • Optional Links
        • Options page
          • Option 1
          • Option 2
          • Option 3
      • Common Customization
        • Enable, disable features
      • Authentication Form Customization
        • Preview sample Authentication Request Form
      • Block Page Customization
        • Preview sample block page
  • Set up Group Administrator Accounts
    • Add Sub Admins to manage groups, users
      • Add a group administrator account
      • Update the group administrator’s password
      • Delete a group administrator account
• Chapter 3: NT Authentication Setup
  • Join the NT Domain
  • Create an NT Domain
    • Add an NT domain
    • Refresh the NT branch
    • View or modify NT domain details
      • Domain Settings
      • Default Rule
    • Delete an NT domain
  • Set up NT Domain Groups, Members
    • Add NT groups, members to the tree
    • Specify a group’s filtering profile priority
    • Manually add a user’s name to the tree
    • Manually add a group’s name to the tree
    • Upload a file of filtering profiles to the tree
• Chapter 4: LDAP Authentication Setup
  • Create an LDAP Domain
    • Add the LDAP domain
    • Refresh the LDAP branch
    • View, modify, enter LDAP domain details
      • LDAP Server Type
      • Group Objects
      • User Objects
      • Address Info
      • Account Info
      • SSL Settings
      • Alias List
      • Default Rule
        • LDAP Backup Server Configuration
          • Configure a backup server
          • Modify a backup server’s configuration
          • Delete a backup server’s configuration
    • Delete a domain
  • Set up LDAP Domain Groups, Members
    • Add LDAP groups, users to the tree
      • Perform a basic search
      • Options for search results
      • Apply a filtering rule to a profile
      • Delete a rule
    • Specify a group’s filtering profile priority
    • Manually add a user’s name to the tree
    • Manually add a group’s name to the tree
    • Upload a file of filtering profiles to the tree
• Chapter 5: Assign/Set up Groups, Members
  • Assign Sub Admin to NT/LDAP Entity
  • Create and Maintain Filtering Profiles
    • Add a group member to the tree list
    • Add or maintain an entity’s profile
      • Category Profile
      • Redirect URL
      • Filter Options
    • Add an Exception URL to the profile
      • URL entries
      • Block URL frame
      • ByPass URL frame
      • Apply settings
    • Create a Time Profile for the entity
      • Add a Time Profile
    • Remove an entity’s profile from the tree
• Chapter 6: Authentication Deployment
  • Test Authentication Settings
    • Test Web-based authentication settings
      • Step 1: Create an IP Group, “test”
      • Step 2: Create a Sub-Group, “workstation”
      • Step 3: Set up “test” with a 32-bit net mask
      • Step 4: Give “workstation” a 32-bit net mask
      • Step 5: Block everything for the Sub-Group
      • Step 6: Use Authentication Request Page for redirect URL
      • Step 7: Disable filter options
      • Step 8: Attempt to access Web content
    • Test net use based authentication settings
  • Activate Authentication on the Network
    • Activate Web-based authentication for an IP Group
      • Step 1: Create a new IP Group, “webauth”
      • Step 2: Set “webauth” to cover users in range
      • Step 3: Create an IP Sub-Group
      • Step 4: Block everything for the Sub-Group
      • Step 5: Use Authentication Request Page for redirect URL
      • Step 6: Disable filter options
      • Step 7: Set Global Group to filter unknown traffic
    • Activate Web-based authentication for the Global Group
      • Step 1: Exclude filtering critical equipment
      • Step 1A: Block Web access, logging via Range to Detect
        • Range to Detect Settings
        • Range to Detect Setup Wizard
      • Step 1B: Block Web access via IP Sub-Group profile
      • Step 2: Modify the Global Group Profile
    • Activate NT authentication
      • Step 1: Modify the 3-try login script
      • Step 2: Modify the Global Group Profile
• Chapter 7: Technical Support
  • Hours
  • Contact Information
    • Domestic (United States)
    • International
    • E-Mail
    • Office Locations and Phone Numbers
      • 8e6 Corporate Headquarters (USA)
      • 8e6 Taiwan
• Appendix A: Authentication Operations
  • Authentication Tier Selections
    • Tier 1: Net use based authentication
    • Tier 2, Tier 3: Web-based authentication
    • Net use based authentication process
      • Re-authentication process
    • Tier 1 authentication methods
      • SMB protocol
        • SMB Signing
      • LDAP protocol
    • Name resolution methods
    • Configuring the authentication server
      • Login scripts
        • Enter net use syntax in the login script
      • View login script on the server console
        • Block page authentication login scripts
    • LDAP server setup rules
    • Tier 2 implementation in an environment
      • Tier 2 Script
      • Tier 1 and Tier 2 Script
    • Environment requirements
      • Minimum system requirements
      • Recommended system requirements
    • Workstation requirements
    • Work flow in a Windows environment
      • 8e6 Authenticator configuration priority
      • 8e6 Authenticator configuration syntax
        • Sample command line parameters
          • Sample configuration file
          • Sample R3000 configuration update packet ‘PCFG’
      • Table of parameters
    • Environment requirements
      • Novell eDirectory servers
      • Client workstations
      • Novell clients
    • Novell eDirectory setup
    • R3000 setup and event logs
    • Product feature overview
      • Windows server requirements
      • Work flow in a Windows environment
    • Set up AD Agent
      • Step 1: AD Agent settings on the R3000
      • Step 2: Configure the domain, service account
      • Step 3: AD Agent installation on Windows server
        • Step 3A: Download DCAgent.msi
        • Step 3B: Run AD Agent installation setup
        • Step 3C: Run AD Agent configuration wizard
    • Use the Active Directory Agent console
      • Activity tab
      • Sessions tab
        • Session table spreadsheet
        • Session Properties window
        • Workstation Interactive Probe window
      • Active Directory Agent Configuration window
        • Service page
        • Appliance page
        • Agent hosts page
          • Add a satellite
          • Remove a satellite
          • Configure a satellite
          • Check the status of a satellite
        • Options page
        • Notifications page
• Appendix B: Disable SMB Signing Requirements
  • SMB Signing Compatibility
• Appendix C: Obtain, Export an SSL Certificate
  • Export an Active Directory SSL Certificate
    • Verify certificate authority has been installed
    • Locate Certificates folder
    • Export the master certificate for the domain
• Appendix D: LDAP Server Customizations
  • OpenLDAP Server Scenario
    • Not all users returned in User/Group Browser
• Appendix E: User/Group File Format and Rules
  • Username Formats
  • Rule Criteria
    • NT User List Format and Rules
    • NT Group List Format and Rules
    • NT Quota Format and Rules
    • LDAP User List Format and Rules
    • LDAP Group List Format and Rules
    • LDAP Quota Format and Rules
• Appendix F: Override Pop-up Blockers
  • Yahoo! Toolbar Pop-up Blocker
    • If pop-up blocking is enabled
    • Add override account to the white list
    • If pop-up blocking is enabled
    • Add override account to the white list
  • AdwareSafe Pop-up Blocker
    • If pop-up blocking is enabled
    • Temporarily disable pop-up blocking
    • Add override account to the white list
    • Set up pop-up blocking
      • Use the Internet Options dialog box
      • Use the IE toolbar
    • Temporarily disable pop-up blocking
    • Add override account to the white list
      • Use the IE toolbar
      • Use the Information Bar
        • Set up the Information Bar
        • Access your override account
• Appendix G: Glossary
  • Definitions
• Index
  • Numerics
  • A
  • B
  • C
  • D
  • E
  • F
  • G
  • H
  • I
  • J
  • L
  • M
  • N
  • O
  • P
  • Q
  • R
  • S
  • T
  • U
  • V
  • W