• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Celestix appliance - ISA 2006 - Authentication fails

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2004 Misc.] >> ISA Firewall Appliances >> Celestix appliance - ISA 2006 - Authentication fails Page: [1]
Login
Message << Older Topic   Newer Topic >>
Celestix appliance - ISA 2006 - Authentication fails - 22.Jun.2007 12:29:28 PM   
jenifern

 

Posts: 26
Joined: 5.Jul.2001
From: Houston, TX USA
Status: offline
I hope someone sees this. No other posts in this section.
I purchased the Celestix / Surfcontrol solution from CDW with 24/7 support contract.
Celestix support staff are very friendly but cannot help me with this issue.
I purchased a Microsoft support incident and they refused to help me saying that Celestix must initiate the call to Microsoft.
Celestix does not have a support contract with Microsoft!
Help, I am now without support on my firewall solution.

Current issue:
On my basic web access rule:
When I remove 'All Users' and add 'Authenticated Users' web traffic fails after a few minutes.

Celestix has tried many things but it still fails. I know one would need much more info than I can type here but since Celestix has checked everyone of my rules and cannot find the issue either I was hoping someone out there might have seen this behavior.

WPAD is through DNS
I also have a Group Policy which configures Web Proxy on IE
Could this be causing an issue?
Could it be a problem with my Active Directory?

When you add 'authenticated users' or a security group from my AD domain (Celestix box is a member) it appears to work for a few minutes. Logs show domain\username. Then, for no apparant reason logs show denied and username is either anonomyous or blank.
I have document 'Troubleshooting Client Authentication on Acess Rules in ISA Server 2004." I have read and studied this document.
I just can't find an issue except the section labeled 'Unauthenticated Users Appear in Logs' which cautions to make sure that Web Proxy settings are configured correctly on client computers.

Any help out there?
JNech
Katy, TX
Post #: 1
RE: Celestix appliance - ISA 2006 - Authentication fails - 24.Jun.2007 1:36:45 PM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi Jen,

What a mess! I didn't know that Celestix didn't have a contract with MS -- I assumed that they did since they need to communicate with MS for escalation. Who did you talk to in PSS?

Do you see any authentication errors in the event log?

Also, make sure you don't have any external DNS servers configured on any of the ISA Firewall's NICs.

Another thing to check out is to make sure that autodiscovery publshing is enabled on the default Internal Network.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to jenifern)
Post #: 2

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2004 Misc.] >> ISA Firewall Appliances >> Celestix appliance - ISA 2006 - Authentication fails Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts