The user must wait for the authentication request to complete before the ProxySG responds to the user with a protected resource. The IP addresses that have a user mapping are stored in the cache for one hour by default; IPs with no user mapping are stored for 30 minutes. The default is No. Click Next to specify the SSL requirements. If the IP address has previously been associated with a user and is in the IP-user cache, it will identify this traffic by user name. You can adjust the cache timeout settings on the System Variable setup page. Help Desk Software by Kayako.
|Date Added:||1 January 2007|
|File Size:||37.78 Mb|
|Operating Systems:||Windows NT/2000/XP/2003/2003/7/8/10 MacOS 10/X|
|Price:||Free* [*Free Regsitration Required]|
One server is active, and the other bluw standby. I have used the BCAAA in a very large site with more than users in a global network, with bcwaa AD trees, distributed across many servers. Installation To install the authentication agent: Heidir on 26 June When the query results in an IP-user mapping, this information is stored in the IP-user cache.
You should have at least two machines for high availability. Most importantly, it is fully compliant with NTLM authentication, so it provides a transparent authentication to the user. For relatively static network environments, storing user mappings for one hour should be sufficient; for more dynamic environments BYOD, laptopsyou may want to store user mappings for a much shorter time period, such as five minutes. Click Next to specify the SSL requirements.
The user must wait for the authentication request to complete before the ProxySG responds to the user with a protected resource. Click Next to accept the default and select the port number. Post a new comment. However, the tradeoff is that stale mappings could cause incorrect user name identification. You will not notice any CPU use, and memory will hardly be used.
Performance of Blue Coat BCAAA agent for authentication – EtherealMind
My personal blog at https: I think that even then it was the virus software causing the load. Launch the install wizard.
If successful, it sends back a success message, if not a it sends failure message. Click Next to specify save options for the certificate.
While I am not sure sure about the performance that Blue Coat recommends I can tell you my experiences. Click Next to specify the subject of the SSL certificate.
By caching the IP addresses and user and group names, PacketShaper is able to speed up user name lookups, as querying bcaax on-box cache is faster than querying the external BCAAA ckat.
Click Next to select the destination folder. I recommend using VMware the free version so that you can use the snapshot features to perform upgrades and to give you a simple roll back plan.
This setting must be compatible with the setting on the ProxySG. PacketShaper bdaaa the query results in two local caches. Because querying the cache is faster than querying the BCAAA server, you can accelerate user name lookups by increasing the cache timeout.
If not, it generates a self-signed certificate with that subject. Join Ethan, Drew and myself as we talk about what happened this week in networking.
Supported Operating Systems The following list describes the platforms that BCAAA can run on to support the specified authentication method these are not supported directory services: You can adjust the cache timeout settings on the System Variable setup page. The default coxt User Classification and Reporting. Installation of any other non-essential software might degrade the BCAAA service performance, which in turn degrades the user experience.
Give the user account sufficient rights to view information contained in the Active Directory. If the IP address has previously been associated with a user and is in the IP-user cache, it will identify this traffic by user name.