Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Content Gateway Security > Content Gateway user authentication > Mac and iPhone/iPad authentication
Mac and iPhone/iPad authentication
Forcepoint Web Security solutions can be used to authenticate or identify Mac and iPhone/iPad users for user- or group-based filtering.
For Mac computers, see:
*
*
*
*
For iPhones/iPads, see:
*
For a list of Frequently Asked Questions regarding Mac and iPhone/iPad authentication, see this article.
Authentication for Mac computers
Forcepoint Web Security solutions can be used to authenticate or identify Mac users for user- or group-based filtering. These restriction apply:
*
*
If your organization uses DC Agent for transparent user identification, see Enabling transparent identification of Mac users with DC Agent.
If your organization uses Logon Agent for transparent user identification, see Deploying the logon application for Mac clients.
If your organization uses Content Gateway to authenticate users, see Authenticating Mac users with Content Gateway.
Manual (prompted) authentication can also be used to enable user and group-based filtering of Mac users.
Enabling transparent identification of Mac users with DC Agent
In order for DC Agent to identify the user on a Mac workstation, the Mac must mount a file share on the domain controller. This can be done by configuring the Mac to use a file share on the domain controller machine as the user's home directory, or by mounting another share with the domain controller.
Note 
Configuration summary:
*
*
When the user logs on to the properly configured Mac OS X system, the Mac mounts a network directory as the user's home directory, the DC Agent user map is populated, and user and group-based policies can be applied to user requests. When requests are blocked, browser-based block pages are displayed normally.
Authenticating Mac users with Content Gateway
Using the Integrated Windows Authentication (IWA) feature of Content Gateway, Mac users can be transparently authenticated when the user is a member of an Active Directory domain and the Mac computer is joined to the Active Directory domain. For more information see Integrated Windows Authentication.
Configuration summary:
*
*
*
*
*
*
*
If Content Gateway is a transparent proxy, no additional Mac system or browser configuration is required.
 
Important 
Firefox users may receive an "Proxy Authentication Required" error message. This is a known issue in FireFox (http://support.mozilla.org/en-US/questions/926378) and is easily corrected by changing the browser configuration. In About:Config set the following options to false:
Typical steps for joining a Mac to an Active Directory domain
1.
2.
Open the Directory Utility. On OS X 10.6 (Snow Leopard), go to:
3.
4.
5.
Select the box next to Active Directory to enable Active Directory support.
6.
7.
Under Domain, enter the Fully Qualified Domain Name (FQDN).
8.
Under Computer ID, enter the computer name.
9.
ou=computers,ou=orgunits,dc=ad,dc=example,dc=com
Your machine will be bound to the specified Active Directory.
10.
Click Apply in the Directory Utility to save your changes and restart the machine.
Authentication for iPhones and iPads
Proxy-based user authentication is supported by the Content Gateway (proxy) component of Forcepoint Web Security, resulting in user- or group-based filtering.
User identification via DC Agent is not supported and, therefore, there is no user- or group-based filtering solution with Web Filter & Security or Forcepoint Web Security. Filtering can be provided to those devices based on IP address or network range.
Content Gateway user authentication has the following features and restrictions:
*
*
*
*
*
Explicit proxy settings can be configured in the iOS Network settings area.

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Content Gateway Security > Content Gateway user authentication > Mac and iPhone/iPad authentication
Copyright 2020 Forcepoint. All rights reserved.