Virtual Secure Web Gateway

Dear All,

my SWG (5.0.2) is configured in proxy mode with LDAP. After it we've tried both NTLM and DC Interface authentications for using policies based on AD groups run on a win2003 domain controller. If we login with a user on a PC what uses SWG as proxy first time it works. After it if we log off and login with a different user into the machine it isn't detected by the SWG, on SWGs configuration screen (search -> search by host) still the first user appairs for the machine. In my printscreen you can see the last login to PC 192.168.254.253 was yesterday 13:50 with user viktor (based on SWG), but that's incorrect, because I've logged into the PC with account Administrator Today 10:00.

Any idea, what can be the problem?

Thanks in advance!

Viktor

What is the Sync Frequency set to under the LDAP Configuration?

The LDAP sync is 1hour, the NTLM authentication TTL is 1min.

Hopefully the 1 min setting is for testing only. NTLM Authentication of TTL of 1 is very low and could result in excess load on the SWG device.

How much time is given in your testing between user1 logging off and user2 loggin in?

You configure both NTLM and dcagent, try to disable ntlm, this worked for me.

Disabling NTLM solved the problem.