3. 1.Client’s unauthorized packet 2.Redirected if packet is HTTP 3.Identification using User Account (Web) 4.Looking for valid User Account (LDAP) 5.Authentication command is issued 6.If client is authenticated, it’s packets are passed-through

4. 1.Client’s packet 2.If client is authenticated, packet is passed-through (allow) 3.Redirected if packet is HTTP 4.Packet is marked and repeated to kernel 5.Packet is dropped

8. Bridge Network: 172.14.2.0/24 Gateway: 172.14.2.254 DNS: 203.158.207.21 eth0 Internal Network “AfwNet” eth1 Local Area Network Virtual Machine 1 AFW Server OS: CentOS 5 br0 Bridge Connection IP: 172.14.2.X/24 IP: DHCP Virtual Machine 2 AFW Client OS: Windows XP