Technical Library
|
Support
Security
>
Content Gateway user authentication
> Surrogate credentials
Surrogate credentials
Surrogate credentials are entries placed in the credential cache after initial successful authentications.
An IP address surrogate ties a credential to an IP address and assumes that the IP address is used by only one user at any given time.
A cookie surrogate is tied to a cookie placed on the client's system and depends on client application support for cookies. This method is required when a client IP address is shared by more than one user at a time, as with multi-user hosts such as Citrix servers.
After the initial successful authentication, Content Gateway uses the surrogate credential to respond to subsequent authentication requests on behalf of the user, thus reducing latency and the load on domain controllers and directory services. Credential surrogate entries are deleted when the Time-To-Live expires.
Security
>
Content Gateway user authentication
> Surrogate credentials
Copyright 2016 Forcepoint LLC. All rights reserved.