Welcome to ISAserver.org

Huge Authentication Problem

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Firewall] >> Firewall Client >> Huge Authentication Problem

Page: [1]

Message

<< Older Topic Newer Topic >>

Huge Authentication Problem - 7.Mar.2007 4:39:39 PM

THEISAMAN

Posts: 3
Joined: 7.Mar.2007
Status: offline

I running 5 firewall clients with an ISA server and I would like to have them authenticate with AD in order to access the network. I tried doing this before, but right after trying to connect with the 5th client wirelessly whom I had already connected with a cat5 cable, the entire shebang failed and now the ISA server refuses to accept any authenticated clients or it just rejects them outright and refuses access. Each client says that it cannot acquire an ip address and the firewall client does not connect either.

What can I do?

Also, does anyone have a sample configuration scheme or a recommended way of setting up the firewall rules?

Here is my setup.

|INTERNET|---|ISA SERVER/ DOMAIN CONTROLLER|---|Firewall clients in the domain|

Thanks in advance.

Post #: 1

Featured Links*

RE: Huge Authentication Problem - 8.Mar.2007 2:52:49 AM

THEISAMAN

Posts: 3
Joined: 7.Mar.2007
Status: offline

I have discovered that in order to get all of the clients to authenticate automatically, I will need to set up WPAD. Unfortunately, I set up the DHCP one and it still won't work. I have no clue why.

(in reply to THEISAMAN)

Post #: 2

RE: Huge Authentication Problem - 8.Mar.2007 9:13:17 AM

elmajdal

Posts: 5074
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline

Hi,

This is a great article by Stefaan, check it : Understanding the Web Proxy and Firewall Client Automatic Configuration

and also check the links specified inside this article as well.

HTH,
Tarek

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to THEISAMAN)

Post #: 3

RE: Huge Authentication Problem - 8.Mar.2007 2:59:38 PM

THEISAMAN

Posts: 3
Joined: 7.Mar.2007
Status: offline

Thanks for the information. I read over the article and I used the DNS method, making sure to enable the setting that makes it not necessary to authenticate a client in order to just connect. I tried using the .vbs script provided. Unfortunately, I can still only automatically detect the ISA server after clients have connected to the network, and it won't let any clients connect in the first place. No clients that attempt to connect get past the acquiring network address stage. Is there a way for clients to receive an ip address, but still need to be authenticated to access the network?

Thank you.

(in reply to elmajdal)

Post #: 4