Preparing the firewall for credential detection

To control which websites users are allowed to submit corporate credentials to, we first need to be able to detect which credentials should be checked. URL filtering can be leveraged to perform user credential checking to ensure company usernames (and passwords, if enabled) are only shared with trusted websites.

As you can see in Figure 6.1, you can access the configuration options via Objects > Security Profiles > URL Filtering > URL Filtering Profile > User Credential Detection.

There are three options available to perform credential detection:

• Use IP User Mapping: Matches the submitted username to the user that is mapped to the source IP via IP user mapping.
• Use Group Mapping: Matches the submitted username to any corporate username in its user-to-group mapping table, which is learned by enabling LDAP group mapping.
• Use Domain Credential Filter: Verifies the submitted username and password match to...