Workaround for Using an Existing Access Policy There are two possibilities to do this you can either use an existing Access Policy or create a new one. Step 3: Add the New Identity to an Access Policy Add the newly created Custom URL Category (please see above) to the Identity by selecting the correct row.Click the Advanced drop-down menu and then click the None Selected link to the right of URL Categories.Create Identity with No Authentication.Navigate to Web GUI > Web Security Manager > Identities.Click Advanced and in the Regular Expressions field, add the following:.In the Sites field, enter the following.Navigate to Web GUI > Web Security Manager > Custom URL Categories.The Teamviewer Agent connects to different servers with different IP addresses, so it is necessary to set up some regular expressions. To configure authentication exemption for Teamviewer, please follow these steps: We can still use the below steps to bypass authentication if we intermittently see 401s/407s in access logs while accessing Teamviewer.Note: In Explicit mode (using PAC file or browser proxy settings), please ensure that the Apply same surrogate settings to explicit forward requests option is checked.If Identities are configured to IP address surrogates, then the below steps may not be required because the client's credentials are cached for a period equal to Surrogate Timeout (default = 1 hour) once they access any website(s) using their browser. The authentication exemption is required if WSA is configured to use Cookies as surrogates in Identities ( GUI > Web Security Manager > Identities). So it is necessary to exclude it from authentication. The Teamviewer Agents do not work with authentication - meaning when the WSA requests for authentication from the TeamViewer application, the application may not provide the domain credentials. The Teamviewer Agent times out and accesslogs shows entries which contain 401 or 407 errors indicating "Proxy Authentication Required". Why does the Teamviewer Agent not work when authentication is enabled on the Cisco Web Security Aplliance (WSA)?Ĭisco Web Security Appliance (WSA), and any AsyncOS version.
0 kommentar(er)
