• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Proxy authentication

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA 2006 Firewall] >> Firewall Client >> Proxy authentication Page: [1]
Login
Message << Older Topic   Newer Topic >>
Proxy authentication - 1.Feb.2007 5:39:41 PM   
xloveusa

 

Posts: 13
Joined: 29.Jun.2006
Status: offline
I'm trying to run a proxy web filter on ISA 2006. I want to require authentication so I can filter by user name in Active Directory. Problem is that stupid XP home is all over and won't save the password; so it constantly prompts for it. I have Mac clients also and some of them do not even recognize the credential screen and the request fails. So I thought using certificates would work. Nope...Microsoft doesn't support certificate based authentication for proxy clients. So I am stuck trying to find a front end authentication that I can use certificates with that also supports the back end AD users ldap queries and allows ALL of my browsers to pass their certs and authenticate users without the login screen. Any ideas?
Post #: 1
RE: Proxy authentication - 1.Feb.2007 8:38:06 PM   
freefall96

 

Posts: 9
Joined: 17.May2005
From: Buffalo - NY
Status: offline
For Starters XP home and mac clients are not able to join a windows domain (AD) i would suggest you check out RADIUS authenication for your ISA.

MS Server 2003 ships with IAS Microsoft's RADIUS server. By using RADIUS you will be able to successfully authenicate clients of all types and of course IAS works with Active Directory.



_____________________________

Freefall96

(in reply to xloveusa)
Post #: 2
RE: Proxy authentication - 1.Feb.2007 10:12:05 PM   
xloveusa

 

Posts: 13
Joined: 29.Jun.2006
Status: offline
Yah I was thinking the same way. But I'm not sure how the repeat "offender" will react (the constant asking for credentials). I guess there is only one way to find out. I'll install it and let you know next week. Thanks

(in reply to freefall96)
Post #: 3
RE: Proxy authentication - 2.Feb.2007 10:07:17 AM   
xloveusa

 

Posts: 13
Joined: 29.Jun.2006
Status: offline
I've set up radius. But it won't allow me to authenticate siting that it failed. In AD I go to the dialin tab and click grant access. But the use remote access policy button is greyed out.

(in reply to xloveusa)
Post #: 4
RE: Proxy authentication - 2.Feb.2007 11:24:29 AM   
freefall96

 

Posts: 9
Joined: 17.May2005
From: Buffalo - NY
Status: offline
Check out these links. Have you registered your IAS server with AD under the IAS mmc?

http://technet2.microsoft.com/WindowsServer/en/library/7f26a61e-8dfa-455f-b596-53aa6349f0511033.mspx?mfr=true

http://www.microsoft.com/technet/isa/2006/authentication.mspx

Answer to the disabled question:
The Control access through Remote Access Policy option is disabled. This option is available only when the domain is at the Windows 2000 or Windows Server 2003 functional level.


_____________________________

Freefall96

(in reply to xloveusa)
Post #: 5

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA 2006 Firewall] >> Firewall Client >> Proxy authentication Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts