Pix 515 AAA Radius problems

I am trying to setup my Pix 515e to log username information and what
website they accessed. I want to set it up so that they don't get
prompted to enter a username or password when they open their web
browser.... i guess you could say i want the authentication to be
invisible.

I have tired using aaa authorisation and aaa accounting on the pix,
and have setup a win2k RADIUs server for the pix to authenticate the
users, but it's not working. The user still gets prompted for a
username & password, and the RADIUS server won't authentcate the user.

Can anyone tell me if i am on the right track? Is there a better way
to do it?

If not, can anyone tell me what i need to setup on the RADIUS server
to allow it to authenticate the users and to do it in such a way that
the don't get prompted.

please help!

Matt

 

:I am trying to setup my Pix 515e to log username information and what
:website they accessed. I want to set it up so that they don't get
rompted to enter a username or password when they open their web
:browser.... i guess you could say i want the authentication to be
:invisible.

But then you don't know whether it is that user, or if it is
someone else using the same computer.

If you just want to associate a name with an IP address when you
look at your logs, then keep a table of names and IPs, and use a
small bit of post-procesing code on the logs to look up the name
corresponding to the IP and stick it on the end of the line.

If you are already doing some kind of good authentication at the time
they log on to their machine, and you have locking screensavers
set on a reasonably short timeout (e.g., 5 minutes) so that no-one can
use their computers while they are out of the room, then probably
they won't mind putting in their name/password occasionally in order to
surf, if you set the auth timeouts right.