Bypass RSA SecurID for internal User
by Sam Jacobs (IPM)
You wish to have SecurID enabled on your Web Interface site when users access the site externally, but don't want to bother your internal users to have to enter their SecurID information when logging on when inside the office.
If you are using the default implementation of Web Interface and Secure Gateway 2.0 or 3.0, where SG proxies traffic over localhost:80, all user IP addresses will appear to Web Interface as coming from 127.0.0.1 (localhost). In order to get the code modifications below to work, you will also need to implement the "Real IP
" modification to determine the REAL Remote IP address of a user.