Welcome to ISAserver.org

Problems authenticating to external websites through ISA 2006

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Firewall] >> General >> Problems authenticating to external websites through ISA 2006

Page: [1]

Message

<< Older Topic Newer Topic >>

Problems authenticating to external websites through IS... - 25.Apr.2007 7:52:15 PM

it_support@pei.ac.nz

Posts: 3
Joined: 23.Apr.2007
Status: offline

I am a technician at an educational institute that has been put in charge of an issue that we a currently have in regards to web authentication. We have just recently upgraded to ISA 2006 from ISA 2004 and we are running it on a DL320 with windows 2003 server. Some of our users are experiencing an authentication issue where the ISA continues to ask them for credentials for each item that loads on a page.

I found the identical symptom at http://support.microsoft.com/kb/886996 however, it did not offer a solution to solving the problem if the site is an external site and not one published by you.

How do I get ISA to quit asking the user for authentication to the external website?

Any help would be most appreciated

Post #: 1

Featured Links*

RE: Problems authenticating to external websites throug... - 28.Apr.2007 12:45:36 PM

tshinder

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline

There is a registry entry that is something like ReturnAuthIfAuthenticated that will fixed this problem. Looks through my blog postings from the last month or so and you will find it.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to it_support@pei.ac.nz)

Post #: 2

RE: Problems authenticating to external websites throug... - 29.Apr.2007 7:23:31 PM

it_support@pei.ac.nz

Posts: 3
Joined: 23.Apr.2007
Status: offline

Hello Tom,
Thanks for you post. I had a look at your blog back to January 2007 and could only find one article related to authentication. It was "Getting Prompted for Authentication When You Enable Firewall Client and Web Proxy Client Autodiscovery?". I went to the related Microsoft link and it did not relate to the problem I had posted. Am I looking in the wrong place?

Cameron

(in reply to tshinder)

Post #: 3

RE: Problems authenticating to external websites throug... - 1.May2007 7:19:34 AM

tshinder

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Cameron,

Yes, that's the one. Make that Registry change and see if that fixes it for you.

Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to it_support@pei.ac.nz)

Post #: 4

RE: Problems authenticating to external websites throug... - 8.May2007 3:59:37 AM

kulwinder

Posts: 1
Joined: 7.May2007
Status: offline

Hi tom,

I am new to this forum and i need your help. As per the reply by cameron i could not find any microsoft link or any thing related in january 2007 blog to solve my "authentication problem". kindly assist

Kulwinder

(in reply to tshinder)

Post #: 5

RE: Problems authenticating to external websites throug... - 8.May2007 3:08:42 PM

tshinder

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Kulwinder,

http://support.microsoft.com/kb/885683

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to kulwinder)

Post #: 6

RE: Problems authenticating to external websites throug... - 8.May2007 5:28:14 PM

it_support@pei.ac.nz

Posts: 3
Joined: 23.Apr.2007
Status: offline

We are running ISA 2006 and we do not use an ISA client. Do you think that fix will still work? The fix says that modifying your registry can cause irreparable damage so I am being cautious.

Kind regards,
Cameron Mottus, B.Ed, A+, LPIC-1
IT Systems Engineer

_____________________________

Kind Regards,
Cameron Mottus,
IT Systems Engineer
Practical Education Institute

(in reply to tshinder)

Post #: 7

RE: Problems authenticating to external websites throug... - 8.May2007 7:56:46 PM

tshinder

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Cameron,

The change is safe and won't break anything.

Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to it_support@pei.ac.nz)

Post #: 8

RE: Problems authenticating to external websites throug... - 9.May2007 7:13:49 AM

Laura_II

Posts: 9
Joined: 9.May2007
Status: offline

Hi, I have the same problem too

Users that can surf on the web are asked for credentials, for example, when the site have streaming videos.

I followed

http://support.microsoft.com/kb/885683

and

http://support.microsoft.com/kb/889035

but doesn't work

I have only 3 rules (ISA 2006 Standard):

1.- DNS from Internal to External (all users)
2.- POP3 and SMTP from Internal to External (group called MailUsers)
3.- HTTP and HTTPS from Internal to External (group called WebUsers)

Any help will be greatly appreciated

(in reply to tshinder)

Post #: 9

RE: Problems authenticating to external websites throug... - 9.May2007 8:53:38 AM

tshinder

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Laura,

Is the Firewall client installed and working correctly?

Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to Laura_II)

Post #: 10

RE: Problems authenticating to external websites throug... - 9.May2007 9:33:52 AM

Laura_II

Posts: 9
Joined: 9.May2007
Status: offline

Hi Tom

I guess, the firewall client icon (with a green arrow) is on the taskbar tray.

(in reply to tshinder)

Post #: 11

RE: Problems authenticating to external websites throug... - 9.May2007 11:15:16 AM

tshinder

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Laura,

OK. Is the Web browser configured to use integrated authentication?

Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to Laura_II)

Post #: 12

RE: Problems authenticating to external websites throug... - 9.May2007 12:24:25 PM

Laura_II

Posts: 9
Joined: 9.May2007
Status: offline

Hi Tom

Yes, only integrated authentication is enabled. And "Require all users to authenticate" is disabled.

(in reply to tshinder)

Post #: 13

RE: Problems authenticating to external websites throug... - 9.May2007 12:24:26 PM

Laura_II

Posts: 9
Joined: 9.May2007
Status: offline

Hi Tom

Yes, only integrated authentication is enabled. And "Require all users to authenticate" is disabled.

(in reply to tshinder)

Post #: 14

RE: Problems authenticating to external websites throug... - 9.May2007 12:24:48 PM

Laura_II

Posts: 9
Joined: 9.May2007
Status: offline

Hi Tom

Yes, only integrated authentication is enabled. And "Require all users to authenticate" is disabled.

(in reply to tshinder)

Post #: 15

RE: Problems authenticating to external websites throug... - 9.May2007 12:29:49 PM

tshinder

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline

In the User Accounts dialog box on the clients, click the Manage Passwords button and clear out the password cache and see if that helps.

Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to Laura_II)

Post #: 16

RE: Problems authenticating to external websites throug... - 10.May2007 5:32:37 AM

Laura_II

Posts: 9
Joined: 9.May2007
Status: offline

I do it, but nothing has changed

Finally I decided to change my strategy.

I saved my current firewall policies and I run the network template again and selected Edge firewall and "Allow limited Web access, allow ISP network services" instead "Block all".

Now users can see videos but credentials aren't asked

(in reply to tshinder)

Post #: 17

RE: Problems authenticating to external websites throug... - 10.May2007 10:05:19 AM

tshinder

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline

That is good! Since the ISA Firewall is a domain member and and the clients are configured as Web proxy and Firewall clients, you don't want to ask for credentails.

Create an "all open" rule that applies only to authenticated users and put that above the rule the template created.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to Laura_II)

Post #: 18