User Guide

CONFIGURING GLOBAL AUTHENTICATION SETTINGS
CHAPTER 16: AUTHENTICATION 357
Redirect Hostname Enter the short host name of the network interface on which
the Web Proxy listens for incoming connections.
When you configure authentication on an appliance
deployed in transparent mode, the Web Proxy uses this host
name in the redirection URL sent to clients for
authenticating users.
You can enter either the following values:
• Single word host name. You can enter the single word
host name that is DNS resolvable by the client and the
Web Security appliance. This allows clients to achieve
true single sign-on with Internet Explorer without
additional browser side setup.
Be sure to enter the single word host name that is DNS
resolvable by the client and the Web Security appliance.
For example, if your clients are in domain
mycompany.com and the interface on which the Web
Proxy is listening has a full host name of
proxy.mycompany.com, then you should enter
proxy in this field. Clients perform a lookup on proxy
and they should be able to resolve
proxy.mycompany.com.
• Fully qualified domain name (FQDN). You can also enter
the FQDN or IP address in this field. However, if you do
that and want true single sign-on for Internet Explorer and
Firefox browsers, you must ensure that the FQDN or IP
address is added to the client’s Trusted Sites list in the
client browsers.
The default value is the FQDN of the M1 or P1 interface,
depending on which interface is used for proxy traffic.
Table 16-9 Transparent Proxy Mode Authentication Settings (Continued)
Setting Description