SonicWALL 5.8.1 Microscope & Magnifier User Manual


  Open as PDF
of 1490
 
User Management
1111
SonicOS 5.8.1 Administrator Guide
On a failure to identify a user due to communication problems with the TSA, an HTTP
browser session is not redirected to the Web login page (as happens on a failure in the SSO
case). Instead, it goes to a new page with the message “The destination that you were
trying to reach is temporarily unavailable due to network problems.”
Viewing and Managing SSO User Sessions
This section provides information to help you manage SSO on your SonicWALL appliance. See
the following sections:
“Logging Out SSO Users” on page 1111
“Configuring Additional SSO User Settings” on page 1111
“Viewing SSO and LDAP Messages with Packet Monitor” on page 1112
“Capturing SSO Messages” on page 1112
“Capturing LDAP Over TLS Messages” on page 1113
Logging Out SSO Users
The Users > Status page displays Active User Sessions on the SonicWALL security
appliance. The table lists User Name, IP Address, Session Time, Time Remaining,
Inactivity Remaining, Settings, and Logout. For users authenticated using SonicWALL SSO
Agent, the message Auth. by SSO Agent will display. To logout a user, click the delete icon
next to the user’s entry.
Note Changes in a user’s settings, configured under Users > Settings, will not be reflected during
that user’s current session; you must manually log the user out for changes to take effect.
The user will be transparently logged in again, with the changes reflected.
Configuring Additional SSO User Settings
The Users > Settings page provides the administrator with configuration options for user
session settings, global user settings, and acceptable use policy settings, in addition to SSO
and other user login settings.
The Enable login session limit and corresponding Login session limit (minutes) settings
under User Session Settings apply to users logged in using SSO. SSO users will be logged out
according to session limit settings, but will be automatically and transparently logged back in
when they send further traffic.
Note Do not set the login session limit interval too low. This could potentially cause performance
problems, especially for deployments with many users.
Changes applied in the Users > Settings page during an active SSO session will not be
reflected during that session.
Tip You must log the user out for changes to take effect. The user will immediately and
automatically be logged in again, with the changes made.