Welcome to ISAserver.org

Web Proxy Filter: How to Proxy User Credentials to a Proxy?

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> HTTP Filtering >> Web Proxy Filter: How to Proxy User Credentials to a Proxy?

Page: [1]

Message

<< Older Topic Newer Topic >>

Web Proxy Filter: How to Proxy User Credentials to a Pr... - 27.Jul.2005 10:28:00 AM

jbmarler

Posts: 5
Joined: 18.Jul.2005
From: Austin
Status: offline

My deployment scenario is ISA 2004ee as a VPN gateway for remote users.

When the Web Proxy Filter is enabled, it appears that ISA 2004ee is attempting to intercept / block client credentials from passing from VPN clients to proxy servers.

When users attempt to connect through ISA VPN to the proxy servers (ISA 2000) to access Internet sites, they receive a username / password challenge several times - even when they enter the username / password their request fails & user receives HTTP 407 Proxy Authentication Required message.

I can "fix" the problem by removing the Web Proxy Filter, but then it appears I lose the ability to log URL's, redirect requests (helpful for Quarantine users), & perform some of the other more advanced features for HTTP traffic management / security.

Does ISA 2004 not want to "proxy to a proxy"? Can this be made to work?

Maybe my search skills are slipping, but there seems to be very little information published regarding the Web Proxy Filter / HTTP Filtering of ISA 2004. Thx.

Post #: 1

Featured Links*

RE: Web Proxy Filter: How to Proxy User Credentials to ... - 1.Aug.2005 10:43:00 AM

tshinder

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Rouder,

Something isn't right here, because I do this all the time and it works a treat.

Make sure the VPN clients are configured to use the Web proxy server address that you want them to connect to -- they will then remote their Web requests to the Web proxy server and the ISA firewall won't intercept the request, since it going to 8080, not 80.

HTH,
Tom

(in reply to jbmarler)

Post #: 2

RE: Web Proxy Filter: How to Proxy User Credentials to ... - 3.Aug.2005 1:54:00 PM

jbmarler

Posts: 5
Joined: 18.Jul.2005
From: Austin
Status: offline

Update: Looks like the problem is that my proxy server on the other side of ISA VPN is running on port 80 & the web proxy filter doesn't know how to manage proxy authentication -- opened (& closed) a case with PSS to confirm.

Probably an easily a preventable problem if you run the proxy server on an alternate port (like 8080 as Tom wisely suggests) to bypass the web proxy filter, unfortunately this is not an option for me at this time. Resolution was to disable the web proxy filter & lose the functionality.

Appreciate the help! I expect this same problem could impact users connecting with site-site VPN as well.

(in reply to jbmarler)

Post #: 3