Welcome to ISAserver.org

.NET registration process fails

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> Firewall Client >> .NET registration process fails

Page: [1]

Message

<< Older Topic Newer Topic >>

.NET registration process fails - 1.Aug.2006 11:39:06 AM

kaiserb_uk

Posts: 7
Joined: 16.Mar.2006
Status: offline

*Resolved*

Hi,

We've just gone live with CRM v3.0 and hit a snag when trying to complete the online registration process: it fails. Specifically, it uses .NET which (according to Microsoft support!) 'can't deal with internet proxies, such as ISA'.

Obviously this has caused us much mirth at MS and their exhaustive testing processes - "Shall we test the registration process through an ISA Firewall? Nah, who uses ISA?".

What actually happens is the server attempts to make an anonymous SSL connection to the ISA web proxy which gets denied.....and that's it. Any other client would then try again with the currently logged on user credentials. We're running an ISA and a Cisco in back to back configuration so I assume there's any way of bypassing the web proxy (by a rule at least). Is there a way of enabling anonymous proxy access?
Unfortunately the system has gone live so I can't just move its network cable into a Cisco DMZ.

Thoughts?

Edit: So I've found the 'require all users to authenticate' bit, is there a danger this will break connectivity for everyone else? I don't suppose there's a way of specifiying users/computers who don't need to authenticate?

*Resolved* - Turning off 'require authentication' worked. Just completed the registration process and then turned it back on. We might even tell Microsoft support so they know the answer in future.

< Message edited by kaiserb_uk -- 1.Aug.2006 12:03:14 PM >

Post #: 1

Featured Links*

RE: .NET registration process fails - 4.Aug.2006 3:45:18 PM

tshinder

Posts: 47644
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Kaiser,

That option is guaranteed to create many problems. I never enable it, and it's not required. If you want authentication, then enable rules that require it.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to kaiserb_uk)

Post #: 2