Help for Kaspersky Web Traffic Security

Adding authentication exclusions

You can add users' computers or web resources to authentication exclusions. If a request is sent from a computer that is on the list of exclusions, or if a web resource from the list of exclusions is requested, the user will not have to complete authentication to connect to the proxy server.

Exclusions are applied to Kerberos authentication and NTLM authentication.

To add authentication exclusions:

1. In the application web interface, select the Settings → Built-in proxy server →Authentication section.
2. If you want to allow specific computers to access all web resources without authentication on the proxy server, enter their IP addresses in the Source settings group.
   1. In the IP addresses field, click the Edit all link.

      The IP addresses window opens.

   2. Enter one or multiple IP addresses.

      You can specify IP addresses in one of the following formats:

      • IPv4 address (for example, 172.16.5.6).
      • IPv4 subnet with a mask in CIDR notation (for example, 192.168.1.0/24).
      • IPv6 address (for example, 2001:0db8:85a3:0000:0000:8a2e:0370:7334).
      • IPv6 subnet with a mask in CIDR notation (for example, fc00::/7).

      When specifying multiple IP addresses, separate them with a semicolon or with a new line.

   3. Click Add.

      The added IP addresses are displayed in the table under the entry field. If the entered value has an invalid format, the icon will appear on its left side. You can modify this address by using the button in the right part of the line.

   4. Click Save.
3. If you want to allow all computers to connect to the defined web resources without authentication on the proxy server, in the Destination settings group specify one of the following settings:
   • IP address.
     1. In the IP addresses field, click the Edit all link.

        The IP addresses window opens.

     2. Enter one or multiple IP addresses.

        You can specify IP addresses in one of the following formats:

        • IPv4 address (for example, 172.16.5.6).
        • IPv4 subnet with a mask in CIDR notation (for example, 192.168.1.0/24).
        • IPv6 address (for example, 2001:0db8:85a3:0000:0000:8a2e:0370:7334).
        • IPv6 subnet with a mask in CIDR notation (for example, fc00::/7).

        When specifying multiple IP addresses, separate them with a semicolon or with a new line.

     3. Click Add.

        The added IP addresses are displayed in the table under the entry field. If the entered value has an invalid format, the icon will appear on its left side. You can modify this address by using the button in the right part of the line.

     4. Click Save.
   • Host name.
     1. In the Hostnames field, click the Edit all link.

        The Hostnames window opens.

     2. Enter one or multiple host names.

        When specifying multiple names, separate them with a semicolon or with a new line.

        To enable subdomains, use a dot at the start of the value. In this case, you cannot specify subdomains as individual records because this could lead to proxy server errors. For example, if you indicated .example.org, you should not add the record abc.example.org.

     3. Click Add.

        The added host names are displayed in the table under the entry field.

     4. If you want the filter to include all subdomains of the specified name, select the Include subdomains check box.

        If you entered a host name with a dot at the start of the value, the Include subdomains check box will be selected automatically.

     5. Click Save.
4. Click Save.

The authentication exclusions will be added.