• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

ISA with Trend Micro InterScan Web Security Suite IWSS

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2000 Cache] >> Web Proxy Client >> ISA with Trend Micro InterScan Web Security Suite IWSS Page: [1]
Login
Message << Older Topic   Newer Topic >>
ISA with Trend Micro InterScan Web Security Suite IWSS - 22.Mar.2005 11:57:00 AM   
sbreeze

 

Posts: 1
Joined: 27.Jan.2003
Status: offline
We are currently have the following configuration set up.

Client XP -> IWSS 2.0 -> ISA 2000 Sp2 -> Internet

The client PC uses the webproxy client and either Ie6 or Firefox, IWSS is installed on it's own Server running Windows 2003, ISA 2000 runs on a dedicated server running win2k with sp4. IWSS is configured to work in dependent mode with ISA as it's proxy.

When accessing a web page for the first time, the browser prompts for a user name and password. If a the correct credentials are used the web page will be displayed. If cancel is clicked in response to the prompt for credentials, the an 407 is displayed. If the browsers refresh button is clicked, the web page will then display without a prompt or without the need to enter a userid or password.

It is then possible to use the browser for several minutes accessing multiple pages before another prompt for a userid and password appears.

We've sniffed the traffic from the client and have observed a sequence of events like the following.

1) Get http:// url.... client -> iwss + isa
2) 407 unauthorised iwss -> client
3) Get http:// url.... client -> iwss + isa
4) 407 unauthorised iwss -> client
5) Get http:// url.... client -> iwss + isa
6) 407 Proxy authentication required. The ISA server requires authorisation to fulfill the request. Access to the web proxy service is denied. Proxy connection closed.

Incidentally, we have also tried this with ISA 2004 and get similiar results.

I have had a good look through my copy of the ISA 2000 book but still can't pin point the cause.

If anyone has had similar problems or can point me in the right direction it would be much appreciated.
Post #: 1
RE: ISA with Trend Micro InterScan Web Security Suite IWSS - 25.Apr.2005 3:09:00 PM   
msillmann

 

Posts: 27
Joined: 25.Apr.2005
Status: offline
I am facing the same problems with ISA 2004 and IWSS 2.0.

Our scenario:

Clients -> ISA 2004 SP1 -> IWSS 2.0 w/ patch 4 -> Internet.

ISA 2004 is to upstream all external traffic to IWSS on the same machine (web chaining rule to port 8082).

Everything works fine, except that some sites (like www.gmx.net/de) require the user to authorize.

Does anyone has a solution for this issue?

Kind regards,

Maik.
quote:
Originally posted by simon b:
We are currently have the following configuration set up.

Client XP -> IWSS 2.0 -> ISA 2000 Sp2 -> Internet

The client PC uses the webproxy client and either Ie6 or Firefox, IWSS is installed on it's own Server running Windows 2003, ISA 2000 runs on a dedicated server running win2k with sp4. IWSS is configured to work in dependent mode with ISA as it's proxy.

When accessing a web page for the first time, the browser prompts for a user name and password. If a the correct credentials are used the web page will be displayed. If cancel is clicked in response to the prompt for credentials, the an 407 is displayed. If the browsers refresh button is clicked, the web page will then display without a prompt or without the need to enter a userid or password.

It is then possible to use the browser for several minutes accessing multiple pages before another prompt for a userid and password appears.

We've sniffed the traffic from the client and have observed a sequence of events like the following.

1) Get http:// url.... client -> iwss + isa
2) 407 unauthorised iwss -> client
3) Get http:// url.... client -> iwss + isa
4) 407 unauthorised iwss -> client
5) Get http:// url.... client -> iwss + isa
6) 407 Proxy authentication required. The ISA server requires authorisation to fulfill the request. Access to the web proxy service is denied. Proxy connection closed.

Incidentally, we have also tried this with ISA 2004 and get similiar results.

I have had a good look through my copy of the ISA 2000 book but still can't pin point the cause.

If anyone has had similar problems or can point me in the right direction it would be much appreciated.


(in reply to sbreeze)
Post #: 2
RE: ISA with Trend Micro InterScan Web Security Suite IWSS - 30.May2005 5:13:00 PM   
dcarrayrou

 

Posts: 1
Joined: 30.May2005
Status: offline
We used an old configuration with ISA2000 and IWSS 2.0 without problem on the same server.

We checked the following configuration.

Client XP /2000 -> ISA 2004 Sp1 -> IWSS 2.0 path 4-> Internet

Ours clients PC use the wpad (port 80)
the webproxy client use (port 8080) with either IE6, IE5.5 .

IWSS and ISA 2004 are installed on the same server running Windows 2003.

ISA server check the user right first and forward the request to IWSS proxy ( port 8090)

The connection fail

Could you specify the network and firewall rules

Thanks

Didier

(in reply to sbreeze)
Post #: 3
RE: ISA with Trend Micro InterScan Web Security Suite IWSS - 6.Oct.2009 6:08:53 AM   
killer_tr

 

Posts: 1
Joined: 6.Oct.2009
Status: offline
I had the same problem with IWSS 3.1 on one server and ISA 2006 on second server. I had access rule on ISA enabling IWSS to pass with all protocols to external with anonymous access to web while IWSS was performing user authentication on AD. He had me prompting three times username and pass for user and for page that was already allowed.

I solved this by modifying access rule for IWSS. Instead of allowing all protocols I explicitly allowed selected protocols (DNS, HTTP, HTTPS, HTTP proxy, LDAP etc whatever protocol you need). And it worked for web browsing.
 

_____________________________

CCNA, MCSA Security, MCTS, MCITP Enterprise Admin, CISSP

(in reply to dcarrayrou)
Post #: 4

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2000 Cache] >> Web Proxy Client >> ISA with Trend Micro InterScan Web Security Suite IWSS Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts