White Paper Abstract:
This sample configuration blocks traffic from the host device (at 40.31.1.47) on the internal network to all devices on the Internet until browser authentication is performed with the use of Authentication Proxy. The access control list (ACL) passed down from the server (permit tcp|ip|icmp any any) adds dynamic entries post-authorization to access list 116 that temporarily allow access from the host PC to the Internet.