+ Post New Thread
Results 1 to 5 of 5
Internet Related/Filtering/Firewall Thread, lightspeed web auth in Technical; Hello, Another thread on here sparked a question I have about my lightspeed. First I should say I donít have ...
  1. #1
    ADMaster's Avatar
    Join Date
    May 2012
    Posts
    322
    Thank Post
    5
    Thanked 33 Times in 28 Posts
    Rep Power
    23

    lightspeed web auth

    Hello,
    Another thread on here sparked a question I have about my lightspeed. First I should say I donít have full control of the box, I am a tier admin.
    I have noticed under the authentication tab I can make all devices authenticate or just if the identity is unknown. Can I have this apply to only one subnet, or exclude a subnet from this?
    I have two cases where I want opposite settings, and Iím not sure how it will all work out yet.

    1 we have reports of students trying to look up inappropriate material, but it is coming from the Ipad subnet, so usernames are not in the reports. I have not had a chance to look at the lightspeed ipad app but that is one solution I will explore. However if I could force the ipads to web auth it might be a nicer solution than the app.

    2 on the other hand we are talking about opening our wifi to guests, these guest devices would not have AD credentials to login to lightspeed. If the guest ip range could be excluded from auth that would be great.

    Also is there a url a user could go to get the login page, currently the only way to web auth is to hit the login link from the blocked page, without forcing all devices to auth of course.

    Thanks for any help and advice.

  2. #2

    Join Date
    Jan 2009
    Location
    Gravesend
    Posts
    101
    Thank Post
    4
    Thanked 19 Times in 9 Posts
    Rep Power
    15
    Hi,

    Yes you can do this

    1 - if you set authentication to either on for unknown devices then you should get the authentication prompt come up for any devices that do not have a lightspeed agent installed. So the iPads that don't have a agent will prompt for a username & password where as your network machines with the agent on will then proceed through to internet without any prompting.

    2 - Again this is "doable" by adding the IP range that your gussets will be using to the exemptions panel at the bottom of the web filter settings page.

    The way we run out lightspeed system is that the require users to authenticate only when their identify is not known, we then add into the exemptions panel any ranges of IPs (or invidual IPs) that we do not want to authenticate. But you do then need to add these ranges/ips to the policy management section with a policy otherwise they will just defualt to what ever your tier policy is (this can be found at the bottom of the policy management page)

    Hope that helps
    Its also worth checking out the lightspeed Wiki (Home - Dashboard -Lightspeed's Support Wiki)
    Luke

  3. 2 Thanks to dobsonl:

    Eappariello (7th March 2013)

  4. #3
    ADMaster's Avatar
    Join Date
    May 2012
    Posts
    322
    Thank Post
    5
    Thanked 33 Times in 28 Posts
    Rep Power
    23
    Thanks, I'll investigate that and run it by the principals wanting the usernames.

  5. #4
    Eappariello's Avatar
    Join Date
    Jan 2007
    Location
    London
    Posts
    72
    Thank Post
    41
    Thanked 16 Times in 14 Posts
    Rep Power
    18
    Just to add some more info, to that great reply:

    If your on version 2.2.17> you can have different authentication lifetimes per User, Group or User OU. Handy for just authenticating students for a class length of time, but staff for longer.

    You can also force / manually log out a web authentication by going to http://lsaccess.me/logout





    Quote Originally Posted by dobsonl View Post
    Hi,

    Yes you can do this

    1 - if you set authentication to either on for unknown devices then you should get the authentication prompt come up for any devices that do not have a lightspeed agent installed. So the iPads that don't have a agent will prompt for a username & password where as your network machines with the agent on will then proceed through to internet without any prompting.

    2 - Again this is "doable" by adding the IP range that your gussets will be using to the exemptions panel at the bottom of the web filter settings page.

    The way we run out lightspeed system is that the require users to authenticate only when their identify is not known, we then add into the exemptions panel any ranges of IPs (or invidual IPs) that we do not want to authenticate. But you do then need to add these ranges/ips to the policy management section with a policy otherwise they will just defualt to what ever your tier policy is (this can be found at the bottom of the policy management page)

    Hope that helps
    Its also worth checking out the lightspeed Wiki (Home - Dashboard -Lightspeed's Support Wiki)
    Luke

  6. #5

    Join Date
    Mar 2013
    Location
    Old Forge
    Posts
    1
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    I too am looking for the third request mentioned here that I don't see a solution for. Specifically, Is there a url that will show the access page without getting blocked first? The teachers here would like to login at the beginning of class and then use lsaccess.me at the end.

SHARE:
+ Post New Thread

Similar Threads

  1. Securing Exchange/Outlook Web Access
    By SpuffMonkey in forum Wireless Networks
    Replies: 9
    Last Post: 6th December 2005, 10:38 PM
  2. mapping a drive to web folder in windows xp
    By russdev in forum Windows
    Replies: 1
    Last Post: 3rd October 2005, 08:31 AM
  3. Web Traffic Via Outlook
    By shane_southampton in forum Windows
    Replies: 7
    Last Post: 13th September 2005, 10:12 AM
  4. Php/MySQL Web Design
    By Adam in forum How do you do....it?
    Replies: 8
    Last Post: 18th July 2005, 04:13 PM
  5. Web traffic monitoring software.
    By Dos_Box in forum Wireless Networks
    Replies: 1
    Last Post: 5th July 2005, 09:33 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •