Other Global User Settings

Allow these HTTP URLs to bypass users authentication access rules: Define a list of URLs users can connect to without authenticating.

Topics:
•
Define HTTP URLS to bypass Authentication
•
Auto-Configuration of URLs to Bypass User Authentication
Define HTTP URLS to bypass Authentication
To add a URL to the list:
1
Click Add below the URL list. The Add URL dialog displays.

2
Enter the top level URL you are adding, for example, www.SonicWall.com. All sub directories of that URL are included, such as www.SonicWall.com/us/Support.html.
•
For wildcard matching, prefix with *. and/or suffix with …, for example: *.windowsupdate.com…
•
To allow access to a file on any host, prefix with */, for example: */wpad.dat.
3
Click on OK to add the URL to the list.
Auto-Configuration of URLs to Bypass User Authentication

You can use the Auto-Configure utility to temporarily allow traffic from a single specified IP address to bypass authentication. The destinations that traffic accesses are then recorded and used to allow that traffic to bypass user authentication. Typically, this is used to allow traffic such as anti-virus updates and Windows updates.

To auto-configure the URL bypass list:
1
On the Users > Settings page, under the Other Global User Settings heading, click the Auto-configure button. The Policy User Authentication Bypass Auto-Configuration dialog displays.

2
Enter the IP address that you want to allow traffic from and click Start.
3
Run the traffic that needs to bypass authentication. Traffic that would otherwise be blocked by firewall rules needing authentication will be allowed through and the destinations recorded. As traffic is detected, the destination addresses will be recorded in the window.
4
To convert a specific address to a more generic wildcard, select the address and click Convert to wildcard.
5
To convert a specific address to a more generic class B (16-bit) or class C (24-bit) network, select the address, click either Class B or Class C and click Convert to network(s).
* 
TIP: Windows Updates access some destinations via HTTPS, and those can only be tracked by IP address. However, the actual IP addresses accessed each time may vary and so rather than trying to set up a bypass for each such IP address, it may be better to use the Convert to network(s) option to set it up to allow bypass for HTTPS to all IP addresses in that network.
6
When you have detected all of the necessary addresses, click Stop.
7
Click Save Selected.
* 
TIP: You may want to run updates multiple times in case the destinations that are accessed may vary.