Overview

DAF is a complete package to handle Web-user authentication on an NT/IIS server, it includes:

• an ISAPI filter (DAF) which handles authentication for all incoming HTTP requests received by IIS
• an ASP application (Web User Manager) to manage users in any DAF databases through a Web interface
• an ASP component (DAFTools) to easily manage DAF users in ASP scripts

To provide more flexibility to suit your needs DAF is available in two versions: STANDARD and PRO:

DAF 4.2 Features	Standard	PRO
System Compatibility
Compatible with NT 4.0 Server and Windows 2000 Server family. Intel processors only.
Compatible with IIS 3.0, 4.0 and 5.0
Usable behind a Firewall
Usable in an ISP/Web-hosting environment
Usable in Web-Farm environment or Clusters Server
User Database Feature
Unlimited number of users per database
ODBC User Database			Microsoft Access, Microsoft SQL Server, Oracle
ODBC Real-time access mode			DAF will query the database to process each authentication request
ODBC Non real-time access mode			DAF will periodically save a private copy of the user database. Authentication  requests are handled with no need to access the database system. This option  considerably reduces the performance cost of using an authentication filter.
Shared remote Microsoft Access User Database			A Microsoft Access file located on a remote shared directory can be used as a user database.
Remote TEXT User Database			A TEXT file located on a remote shared directory can be used as and user database.
TEXT User Database			A TEXT file can be used as an user database. The syntax is specific to DAF.
Web Accounts Properties: Mapped NT account, DAF Groups, Expired, Disabled, Number of visits, Date of Last visit
Multiple user databases			DAF can handle several users' database. Each user database can be bound to an IP address or a host name. For more than one user database, User Database Extension licenses are required.
Shared network directory protection			DAF can protect a virtual-web directory physically located on remote NT Server.
Encrypted password in user database			DAF can encrypt passwords stored in the user database
Host Names support			A user database can be bound to a Host Name (ex: www.mydomain.com)
IP Addresses and Ports support			A user database can be bound to a specific IP address and port  (ex: 192.168.200.1:8080)
Multi-Homing			A user database can be bound to several IP Addresses, port and Host Names.
Web User Manager			Web Interface to manage a user database.
User Database Administration without any specific NT rights
Limited to 10 users when running unregistered (Evaluation mode)			When running unregistered, all features are active but the number of usable users is limited to 10 users per database.
Login Window
HTML Login Form			Web clients can login using an HTML form instead of the standard popup box. This option requires the use of cookies.
Custom HTML Login Form			DAF can use a custom HTML Login Form.
SSL Support when using HTML Login Form option			Two modes available: (1) the Login Form always uses an SSL connection whether or not the protected resource was requested using a secure connection. (2) the Login Form is secured only if the protected resource was requested using a secure connection.
Standard popup Authentication box			Basic Authentication scheme is used. No cookies required.
Files and Directories Protection
NTFS Permission			If resources are protected with NTFS permission, each DAF web account is mapped to an NT account, which will be used by IIS to access the resource. A single NT account can be used for many DAF accounts.
Access permission can be defined without any specific NT rights			Access permission can be defined with a short TEXT file (called DAFAUTH.INI) located in each protected directory. Only a simple read-write FTP access to the protected directory is required.
Miscelaneous Features
Concurrent Access Control			DAF can detect and prevent concurrent accesses using a shared login and password.
IP Filtering			Depending on the client IP address or subnetwork, DAF can grant or deny access.
E-mail notifications
Real-time Log for debugging
Redirection on account disabled or expired account			DAF can redirect the request toward a predefined URL for a web-client connection with an expired or disabled account.
DAFTools ASP Component			DAF comes with an ASP component, which can be used within ASP scripts to easily access and manage a user database.
= No         = Yes