NETGEAR ProSafe SSL312 - Manual (Page 46)

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Manual
3-12 Authenticating Users
v1.1, November 2006
8. Click Apply to update the configuration. Once the domain has been added, the domain
displays in the table on the Domains screen
Troubleshooting Active Directory Authentication
If your users are unable to connect via Active Directory, verify the following:
1. The time settings between the Active Directory server and the SSL VPN Concentrator must be
synchronized. Kerberos authentication, used by Active Directory to authenticate clients,
permits a maximum of a 15-minute time difference between the Windows server and the client
(the SSL VPN Concentrator). The easiest way to solve this issue is to configure Network Time
Protocol on the Date and Time screen and check that the server's time settings are also
correct.
2. Confirm that your Windows server is configured for Active Directory authentication. If you
are using a Window NT 4.0 server, then your server only supports NT Domain authentication.
Typically, Windows 2000 and 2003 servers are also configured for NT Domain authentication
to support legacy Windows clients.
Deleting a Domain
To delete a domain, click the Delete link in the Domains table for the domain you wish to remove.
Once the SSL VPN Concentrator has been updated, the deleted domain will no longer appear in
the table in the Domains table.
Note: The SSL VPN Concentrator “geardomain” domain cannot be deleted.