EdgeSWG management console authentication method

Products

• ProxySG Software - SGOS
• ISG Proxy
• Advanced Secure Gateway Software - ASG
• SGVA

Issue/Introduction

The access to the proxy management console GUI on HTTPS port 8082 or HTTP port 8081 can be access either using the default 'admin' user or using an authentication realm (i.e IWA,LDAP) via the policy (under Admin Authentication Layer). Authentication method supported for admin authentication is different than authentication methods supported for user's internet access.

Resolution

Admin authentication method uses only BASIC mode .Currently NTLM or Kerberos is not supported.

The authentication realm used in the policy for admin authentication also requires BASIC credentials option to be enabled. For example when using IWA realms, if the option below is disabled, policy installation will fail.

 

Below error when trying to install the policy with the IWA authentication realm having 'Allow Basic credentials' option disabled:

Error: <Admin> layer authentication requires that the realm support BASIC or Connection credentials. BASIC credentials should be enabled or a new realm should be specified.: 'SYMCDEMOS'
vpm-cpl:xx:     authenticate(SYMCDEMOS)  authenticate.force(no)    ; Rule x

There were 1 error and 0 warnings