Configuring Proxy Authentication Method

Proxy Authentication enables you to configure the authentication method used by the proxy. This determines how client machines are validated when accessing the Internet. Proxy Authentication must be enabled to be able to create new policies for users or groups. By default, Proxy Authentication is disabled. When Proxy Authentication is disabled, you are only allowed to configure new policies using IP addresses.

For enhanced security we recommend using Integrated Authentication. This method is more secure since unlike Basic Authentication it does not transmit user credentials over the network.

Proxy authentication settings

To configure user authentication method:

1. Go to Core Settings > Connection Settings.
2. Click the Proxy Authentication switch to enable.
3. In the Proxy Authentication area, select one of the following options:

Option 1: Leave Proxy Authentication off if the user is not required to provide login credentials when new Internet sessions are launched.

Option 2: If proxy authentication is required, select one of the following options:

Option	Description
Basic authentication	Select if user is required to provide login credentials when new Internet sessions are launched. When using Basic authentication, the browser prompts the user for a user name and password. This information is transmitted across HTTPHypertext Transfer Protocol. as plain text and considered insecure.
Integrated authentication	(Recommended) This option enables GFI WebMonitor proxy to authenticate users by using the client machine access control service. User is not prompted to provide login credentials when new Internet sessions are launched. We recommend using Integrated authentication in a Windows domain environment since this method of authentication does not transmit user passwords across the network. NOTE Integrated authentication is disabled if the GFI WebMonitor machine authenticates local users as Guest. The Guest only network access model grants all users the same level of access to system resources and so GFI WebMonitor proxy will not be able to differentiate between the different users using a client machine.

4. [Optional] In the IP's that will bypass the authentication field, key in IP addresses to exclude from proxy authentication. IP addresses specified in this field will not be prompted to provide login credentials when new Internet sessions are launched.
5. Click Save.