Web Authorization

In this type of authorization any request from an unauthenticated user sent via a web browser will be redirected to a special authorization page of SafeUTM.

For this type of authorization, the IP address of SafeUTM LAN interface must be specified as the default gateway. Also, DNS address resolution must work before connecting to the internet, otherwise example.com browser request will not be redirected to the gateway and, accordingly, login and password request will not appear in the browser.

You can check name resolution in Windows using the command: nslookup google.com. The output of this command must contain IP addresses.

To configure authorization via web interface, go to Users -> Authorization and select Web Authorization and Authorization via Web Interface, as shown in the screenshot below:

Next, log in under the account of the selected user and try to access the internet via a web browser. An authorization window should appear where you need to type in the account’s login and password of the user created on SafeUTM. The authorization window can be seen in the screenshot below:

When the user is authenticated via web, access to the internet will be provided until the authorization is forcibly canceled or terminated due to user’s inactivity.

When logging into an HTTPS website, the user must confirm trust to the SafeUTM certificate. Alternatively, the certificate can be added to trusted root certification centers on the device (for example, through domain policies).

It is recommended to specify the IP address of the local SafeUTM as DNS server on the LAN computers and devices.

You can learn more about authorization of Active Directory users by clicking on this link.