Welcome to ISAserver.org

Authenticating and Proxy (2 nics)

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Web Proxy] >> General >> Authenticating and Proxy (2 nics)

Page: [1]

Message

<< Older Topic Newer Topic >>

Authenticating and Proxy (2 nics) - 28.Apr.2008 10:27:05 AM

asaunders

Posts: 15
Joined: 11.Apr.2008
Status: offline

Hi
Inherited an ISA2006 server on an appliance. Its been setup in an interesting fashion;
Its only doing web proxy work (its not on the edge or doing any real firewall work)
Out of the 6 nics, 2 are active (both on the lan but with different ip ranges)
Websense is sitting on top to monitor
Firewall clients have been distributed onto our citrix farm but not fat clients.

I want to get usernames instead of ip addresses for websense. It seems ISA is only collecting IP and anonymous for the web proxy clients. I turned on digest authentication (authentication not enforced) but I'm still getting anonymous web proxy clients.
What have I done wrong?
PS I havent restarted the firewall service since altering the authentication method.

Post #: 1

Featured Links*

RE: Authenticating and Proxy (2 nics) - 28.Apr.2008 11:22:07 AM

ferrix

Posts: 363
Joined: 16.Mar.2005
Status: offline

I'd use integrated auth, first of all. Secondly, if you allow anonymous, then anon will always be used. The browsers won't volunteer credentials; the server has to demand them.

(in reply to asaunders)

Post #: 2

RE: Authenticating and Proxy (2 nics) - 29.Apr.2008 5:04:00 AM

asaunders

Posts: 15
Joined: 11.Apr.2008
Status: offline

Okay
thats great. I think in all the demo's I've seen that turned off.
Right I've turned it on and most users are okay, though I've got a couple who are using IE and getting challenged. Should I turn on basic authentication too?

(in reply to ferrix)

Post #: 3