Relationship between the firewall and NetCache authentication

About this section

Information in this section applies only to Web caching.

Note
If a news server requires authentication, the news server handles the authentication. If a streaming server requires client authentication, NetCache establishes a connection to the streaming server and forwards the authentication information given by the client.

If a NetCache appliance is parallel to the firewall

If a NetCache appliance is parallel to a firewall, Web requests bypass the firewall completely. Therefore, if you want protocol authentication for your users, you must enable authentication in NetCache and specify the authorized protocols for individual users.

If a NetCache appliance is inside the firewall

If a NetCache appliance is inside the firewall, you can set up authentication in one of the following ways:

The NetCache appliance authenticates the client.
The firewall authenticates the client. If you do not want to disturb the security of your firewall, continue to have the firewall authenticate clients.

If you want the firewall to authenticate users

You do not need to configure protocol authentication in NetCache for individual users. In NetCache, you add user names and passwords only for the system administrators who need to use the Appliance Manager. You do not enable authentication in NetCache.

If you want NetCache to authenticate users

You enable protocol authentication in NetCache and set up user authentication in one of the following ways:

Use the NetCache user database, in which case you need to configure protocol authentication for individual users.
Use an LDAP server for user authentication.
Use a RADIUS server for user authentication.
Use the NTLM authentication protocol for user authentication.
Use the Kerberos authentication protocol for user authentication.

If NetCache performs the authentication, the firewall is authenticating non-Web traffic only.

Requirement for access to an LDAP or RADIUS server

If you want NetCache to use an LDAP server or RADIUS server for authenticating requests, you need to do the following:

If the LDAP server or RADIUS server is outside the firewall
- Configure NetCache to point to the LDAP server or RADIUS server.
- Ensure that the firewall is set up so that NetCache can reach the LDAP server or RADIUS server through the firewall.
If the LDAP server or RADIUS server is inside the firewall
- Configure NetCache to point to the LDAP server or RADIUS server.

Requirements when using the NTLM or Kerberos authentication protocol

If you are using the NTLM or Kerberos authentication protocol, you need to do the following:

If the Microsoft Windows authentication environment is outside the firewall
- Configure NTLM or Kerberos options in NetCache to enable NetCache to communicate with the Windows authentication environment.
- Ensure that the firewall is set up so that NetCache can reach the Windows authentication environment through the firewall.
If the Microsoft Windows authentication environment is inside the firewall
- Configure NTLM or Kerberos options in NetCache to enable NetCache to communicate with the Windows authentication environment.