Fortinet 241 FortiWeb 5.0 Patch 6 Administration Guide
To configure an authentication policy
1. Before you can configure an authentication policy, you must first configure:
end-users (see “Configuring local end-user accounts” on page 227, “Configuring LDAP
queries” on page 228, or “Configuring NTLM queries” on page 235)
user groups (see “Grouping users” on page 236)
one or more authorization rules to select the authorization mechanism, select the user
group, and the set of URLs that is the authorization realm (see “Applying user groups to
an authorization realm” on page 238)
2. Go to Application Delivery > Authentication Policy > Authentication Policy.
To access this part of the web UI, your administrator’s account access profile must have
Read and Write permission to items in the Web Protection Configuration category. For
details, see “Permissions” on page 47.
3. Click Create New.
4. Configure these settings:
Setting
name
Description
Name Type a unique name that can be referenced in other parts of the
configuration.
Do not use spaces or special characters. The maximum length is 35
characters.
Connection
Timeout
Type the connection timeout for the query to the FortiWeb’s query to the
remote authentication server in milliseconds.
The default is 2,000 (2 seconds). If the authentication server does not answer
queries quickly enough, to prevent dropped connections, increase this value.
Delete
Edit
Clear all