Issue with HTTP Authentication

Question

I am trying to implement an authentication/timeout
          system whereby the initial login is done by a standard
          HTML form (posted). When the session times out and the
          user requests a service, the session is "revived" by
          custom HTTP Authentication. In this way, a complex set
          of frames and multiple windows is not disrupted by a
          new window.
          The problem is that one a user HTTP Authenticates, the
          AUTHORIZATION header value stays until the browser is
          closed. Consequently, the user never has to
          authenticate again, even when the session times out,
          because when the servlet requests authorization, it is
          right there in the servlet request.
          So my question is, how do I clear or remove the
          AUTHORIZATION header item from the client ?
          Thanks.
          //Nicholas
          

Answer 1

Hi,
Opened a TAC and he confirmed that 8.2.1 supports the SDI for http/asdm authentication.
http://www.cisco.com/en/US/docs/security/asa/asa82/release/notes/asarn82.html#wp340497
Regards
Amar