8e6 Technologies Enterprise Filter Authentication R3000 - Manual (Page 217)

A
PPENDIX
A: A
UTHENTICATION
O
PERATIONS
T
IER
1: S
INGLE
S
IGN
-O
N
A
UTHENTICATION
8
E
6 T
ECHNOLOGIES
, R3000 I
NTERNET
F
ILTER
A
UTHENTICATION
U
SER
G
UIDE
203
Re-authentication process
1. The user loses his/her user profile after one of the
following incidences occurs:
• the server is rebooted, or
• the connection from the user’s machine to the server is
dropped (as with a faulty network cable)
2. A block page displays for the user.
3. In order to re-access the Internet, the user must re-
authenticate him/herself by clicking a link in the block
page to generate a login script that re-authenticates the
user’s profile.
Tier 1 authentication methods
Tier 1 supports two server authentication methods: Server
Message Block (SMB) and LDAP.
SMB protocol
SMB is a client/server protocol that requires the client to
send a request to the server and receive an authentication
response from the server, in order for the client to access
resources on the network.
As the default protocol for NT 4.0 and earlier operating
systems, SMB is supported by Windows 2000 and later OS
versions.
SMB Signing
SMB Signing is a Windows security feature that prevents an
active network session between a client and server from
being tapped. While Microsoft has made this feature avail-
able since Windows NT 4.0, it was not a default setting.
However, in Windows 2003, this feature is enabled by
default.