Next steps

Deploying an I Series Appliance | Forcepoint Web Security Cloud

Now you have completed the initial setup process, you can begin configuring your service to manage your organization's traffic. To get started with the cloud portal, refer to the Forcepoint Web Security Cloud Getting Started Guide.

Additional information and help for your appliance hardware version can be found on the Forcepoint Documentation website.

This chapter contains guidance on using the following features of your I Series appliance:

Configuring Active Directory authentication

Managing protocols and exceptions

Running diagnostics

Monitoring appliance traffic

Configuring Active Directory authentication

Use the appliance Configuration > System page to connect to an Active Directory server for transparent NTLM authentication. When this screen first opens, the status under Active Directory Authentication is Disconnected, and a button labeled Connect is available.

To establish a connection to an Active Directory server for authentication:

Click Connect.

In the Active Directory Authentication dialog, enter the following server information in the appropriate fields:

Domain name

Active Directory administrator name

Active Directory administrator password

Note that this password is used only for establishing the server connection. The contents of this field are not stored anywhere in the system.

Indicate how the system finds the domain controller by selecting 1 of the following options:

Auto-detect using DNS

Enter a domain controller name or IP address.

You can specify backup servers in a comma-separated list.

Click OK.

The connection cannot be made if the server hostname does not adhere to Active Directory naming restrictions. See First-Time Configuration Wizard for a detailed list of Active Directory hostname requirements.

After a connection is successfully established, the button name changes from Connect to Disconnect.

Enabling browsers for NTLM transparent authentication

In an I Series appliance deployment, NTLM transparent authentication is available for your end users if you:

Connect your appliance to a local Active Directory

Enter your NTLM domain on the Authentication tab when you add your appliance to Forcepoint Web Security Cloud

Select NTLM transparent identification where possible on the Access Control tab in your Forcepoint Web Security Cloud policy.


	Note If validating against a local Active Directory for NTLM authentication, an end user cannot use their email addresses as their user name, and must use the domain\username format (for example, MYCOMPANY\jsmith).

In order for a browser to work with NTLM transparent authentication, the machine on which the browser is hosted must be part of the domain. You must also configure your end users' browsers to support this form of authentication. See Configuring browsers for NTLM identification.