User Guide

132
IRONPORT ASYNCOS 6.3 FOR WEB USER GUIDE
MATCHING CLIENT REQUESTS TO IDENTITY GROUPS
Figure 7-2 on page 133 shows how the Web Proxy evaluates a client request against the
Identity groups when the Web Security appliance is configured to use:
• No authentication surrogates
• IP addresses as authentication surrogates
• Cookies as authentication surrogates with transparent requests
• Cookies as authentication surrogates with explicit requests and credential encryption is
enabled
Figure 7-3 on page 134 shows how the Web Proxy evaluates a client request against the
Identity groups when the Web Security appliance is configured to use cookies as the
authentication surrogates, credential encryption is enabled, and the request is explicitly
forwarded.