Welcome to ISAserver.org

Web proxy user authentication

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Cache] >> Web Proxy client >> Web proxy user authentication

Page: [1]

Message

<< Older Topic Newer Topic >>

Web proxy user authentication - 6.Jun.2007 3:52:17 AM

danieltan07

Posts: 51
Joined: 5.Feb.2007
From: Malaysia
Status: offline

I've set a http rule to authenticated user but when i use web proxy in my client, why it doesn't show up the user prompt even i enable it in my browser ? Thanks

Post #: 1

Featured Links*

RE: Web proxy user authentication - 6.Jun.2007 4:55:31 AM

elmajdal

Posts: 5061
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: online

Hi,

have you set the proxy in the IE Connection Settings ???

Tools > Internet Options > Connections > Advanced > Proxy Server

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to danieltan07)

Post #: 2

RE: Web proxy user authentication - 6.Jun.2007 5:26:41 AM

danieltan07

Posts: 51
Joined: 5.Feb.2007
From: Malaysia
Status: offline

Web proxy client can get online. Yes i set it to my isa server using netbios name.

(in reply to elmajdal)

Post #: 3

RE: Web proxy user authentication - 7.Jun.2007 1:49:56 AM

danieltan07

Posts: 51
Joined: 5.Feb.2007
From: Malaysia
Status: offline

Hi, i solved my problem already. It is because of the rules. I place a http rule from internal to external with all user above http rule with authenticated user. So i remove the all user rule. But isn't that those user with fwc will only use rule with authenticated user ?

(in reply to elmajdal)

Post #: 4

RE: Web proxy user authentication - 7.Jun.2007 2:19:31 AM

elmajdal

Posts: 5061
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: online

The ISA 2004/2006 rules process depends on the ORDER of the rule.

So, in general, you put anonymouse rule above authenticated rule and deny rule above allow rule.

if you place an all users rule above authenticated rule for the same source and destination, then the authenticated rule will be skipped.

read this to understand more:

http://www.isaserver.org/articles/ISA2004_AccessRules.html

and

http://blogs.technet.com/isablog/archive/2007/04/11/16-rules-for-deploying-access-rules.aspx

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to danieltan07)

Post #: 5

RE: Web proxy user authentication - 7.Jun.2007 11:10:47 PM

danieltan07

Posts: 51
Joined: 5.Feb.2007
From: Malaysia
Status: offline

Tarak, what does it mean for "Never allow access for all to Local host" ? if not from internal then where should it from and how to access isa server ?

(in reply to elmajdal)

Post #: 6

RE: Web proxy user authentication - 8.Jun.2007 3:29:59 AM

elmajdal

Posts: 5061
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: online

Hi ,

quote:

Tarak, what does it mean for "Never allow access for all to Local host" ? if not from internal then where should it from and how to access isa server ?

Thats true, ISA Server is a Firewall, why would you increase the surface attack, even from the Internal Network, to access the ISA Server, there is a pre configured set of System Policy, that you can adjust them to suit your needs.

you dont need to create Firewall Policy to your LocalHost, unless you do not find the required system policy .

read this : http://www.isaserver.org/tutorials/Editing-ISA-2004-system-policy-Part1.html

http://www.isaserver.org/tutorials/Editing-ISA-2004-system-policy-Part2.html

HTH,
Tarek

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to danieltan07)

Post #: 7