Actually, this is authentication to get out to the web, not into our web
server.  I guess my real question is: How good of a proxy is built into
Firewall-1, and can it use TACACS authentication?
        Thanks,
                Dave




-----Original Message-----
From: Jeff Sedayao [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, October 20, 1999 6:38 PM
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Subject: Re: Firewall-1 and TACACS


> Hello,
>       I was wondering if anyone has integrated a Solaris TACACS server
> with Firewall-1 for the purpose of authenticating users to access web
sites.
> We are migrating from IBM firewall with Netscape Proxy Server to Firewall
1
> for Solaris and I'm trying to find a way to do this without Netscape
Proxy.
> We use TACACS for router, PIX, and dial-in authentication, so it would be
> convenient to use it for web access also.  The only reason to require
> authentication is that some of our departments do not want people using
the
> web, and others want to track where people go.

If you are using Apache web servers, there is a patch to Apache that
lets you use TACACS or Radius as an authentication mechanism.  That
would be one way to handle the problem.

>       Thank you,
>               Dave McGlumphy
> 
> 
> 
> -
> [To unsubscribe, send mail to [EMAIL PROTECTED] with
> "unsubscribe firewalls" in the body of the message.]
> 


-- 
Jeff Sedayao
Intel Corporation
[EMAIL PROTECTED]
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]

Reply via email to