Welcome to ISAserver.org

Web Server & Radius Authentication

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 General ] >> Web Publishing >> Web Server & Radius Authentication

Page: [1]

Message

<< Older Topic Newer Topic >>

Web Server & Radius Authentication - 29.Aug.2005 5:31:00 PM

davei

Posts: 10
Joined: 13.Jul.2001
From: Gainesville, VA, USA
Status: offline

I have published a Web Server via ISA 2004 and have set it to use a Microsoft Radius server for authentication. Everything is working great except in the radius server EVERY connection to webserver is logged - not just the initial authentication. It looks like ISA is authenticating every http request - even if they are made within a millisecond of the previous.

The user experience is fine. They are only having to login once.

Is there a way to tell ISA not to do this? I'm thinking if I have multiple users hitting this site it will kill my radius server.

Thanks for the reply.

Post #: 1

Featured Links*

RE: Web Server & Radius Authentication - 30.Aug.2005 6:28:00 AM

tshinder

Posts: 47668
Joined: 10.Jan.2001
From: Texas
Status: online

Hi Dave,

That's how RADIUS is supposed to work.

That's why I ALWAYS make my ISA firewalls domain members. You can avoid the problems with RADIUS and end up with better security and performance. Life just doesn't get better than that.

HTH,
Tom

(in reply to davei)

Post #: 2

RE: Web Server & Radius Authentication - 30.Aug.2005 7:18:00 AM

davei

Posts: 10
Joined: 13.Jul.2001
From: Gainesville, VA, USA
Status: offline

Thanks for the reply Tom. I was thinking this would be your answer.

How about this though - make my ISA server a DC in its own forest and setup a trust between my ISA forest and the other forest? Is there any problem making an ISA server a DC?

(in reply to davei)

Post #: 3