Webproxy Authentication Error (Full Version)

All Forums >> [ISA 2006 Web Proxy] >> General



Message

Intasar -> Webproxy Authentication Error (20.Jun.2008 3:08:28 AM)

I have been running ISA 2006 in my network for quite some time, without
issue. However, that has all changed. I now get the following error on all
of my clients when trying to get out the internet via this server.

Error Code: 407 Proxy Authentication Required. The ISA Server requires
authorization to fulfill the request. Access to the Web Proxy service is
denied. (12209

just firewall supportive messenger opened like Yahoo but not go into the its chatrooms and some time client access the any website without 407 error but after 5 min problem still again.

Ideas?
Thanks in advance



paulo.oliveira -> RE: Webproxy Authentication Error (20.Jun.2008 10:51:38 AM)

Hi,

are saying that you cant access yahoo web site or yahoo messenger?

Regards,
Paulo Oliveira.



Intasar -> RE: Webproxy Authentication Error (21.Jun.2008 3:36:06 AM)

Hello paulo.oliveira

sorry for my bad english. i m saying a firewall supported messengers like yahoo skype and others working fine and open fine but problem with WEB PROXY CLIENTS. means to say if Internal Clients open a website so they have an HTTP 407 Proxy Authentication error (12209). but TCP supported messengers working fine with Firewall client but problem in WEB PROXY .

Look the screen shot i hope u will understand after viewing Images.

its Internal And Local Host Property

[image]http://www.roboimages.com/image/ri29216/example1.JPG[/image]

I M checked The Require All Users To AUthenticate Because This Machine Have Active Directory Installed And All Clients Accounts Already Have In The Active Directory So Why It Will Give The Error .. ?

One more thing !

Look this images

[image]http://www.roboimages.com/image/ri29217/example2.JPG[/image]

cache automaticlay unavailable after rebooting windows server machine

Thanks Advanced



paulo.oliveira -> RE: Webproxy Authentication Error (21.Jun.2008 11:18:11 AM)

Hi,

first things first. You don´t need to enable webproxy for local host network. Uncheck that check box.
If you want to to allow only authenticated users to access the internet, for example, you don´t have to mark the check box "Require all users to authenticate". If you do it, you are saying, "hey ISA allow only authenticated traffic and deny the rest". [;)]
So, you have two problems:
1- You´re allowing only authenticated traffic from local host network to all others network. But some commands can not authenticate;
2- The same to your internal network;

The solution:
1- Unchek the webproxy setting from your local host network;
2- On your internet access rule, set the condition to all authenticated users or some other AD group you have (remember, only webproxy and firewall clients can authenticate);
3- Uncheck the "Require all users to authenticate" from the internal network.

Regards,
Paulo Oliveira.



paulo.oliveira -> RE: Webproxy Authentication Error (21.Jun.2008 11:19:46 AM)

Oh! I forgot about your cache problem. [:)]
Do you have enough disk space? Are the event log showing something?



Intasar -> RE: Webproxy Authentication Error (23.Jun.2008 8:54:51 AM)

thx paulo.oliveira for answer

well u means during makin access rules i m submited the authentication client group in the rule ? but in ISA 2006 AUthentication group is default and it will not been modifyed so how can it will be work on just my choiceable clients ? could u tell me its work ?well thanx for  the solution i m try this and show u how it works after applying. :)

second no a cache drive have to much space but it will be unavailable after rebooting windows u can see the size of cache drive i will be put in 10000 but i m rebooting windows server machine so its automaticaly unavailable.

yes one thing how can i m posted here the ISA 2006 Logs and where can i see this in the ISA 2006 Thnx



paulo.oliveira -> RE: Webproxy Authentication Error (23.Jun.2008 9:58:11 AM)

Hi,

in the condition you can assign an AD group (example, Internet_Users) or the ISA built-in authenticated users. Doesn´t need to be when you´re creating the rule. You can just modify that rule.

To see ISA log events check Monitoring - Alerts or the windows event viewer.

Regards,
Paulo Oliveira.



Intasar -> RE: Webproxy Authentication Error (8.Jul.2008 7:53:57 AM)

quote:

in the condition you can assign an AD group (example, Internet_Users) or the ISA built-in authenticated users. Doesn´t need to be when you´re creating the rule. You can just modify that rule.

To see ISA log events check Monitoring - Alerts or the windows event viewer.



Hello paulo.oliveira

i m applying any thing u tell me above but problem still there. now i m noticed that my net speed is to much slow on clients machines because i m maked just one rule "Out Bound" To "All Users" so its working and runing fine on all clients but if i m selected my Own maked Group from my Active directory so that will not worked properly after maked rule its showing the same error on clients machines OR during Browsing.


quote:

Error Code: 407 Proxy Authentication Required. The ISA Server requires
authorization to fulfill the request. Access to the Web Proxy service is
denied. (12209


but i m replace my own created groun into "All Users" in ISA Rule so networking fine on clients machines but with slow browsing.

i m try everything that available here but i m not resolved this matter my self .. now after this trouble i m checked some clients machines and i m taking some prove that showing tha't ISA 2006 Not working Properly .. i m checked client machine Event Viewer so ther have Some errors.

quote:

Application [svchost.exe]. Authentication failed. The user credentials were not accepted by ISA Server.  Verify that the user account running this application has the required permissions.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


i think its not client machine or windows problem .. its the ISA Problem .. !

now u have any idea why client PCs have this errors ? yes i m checked SERVER Machine Events there is not any error !

Second think : when i m browsing on my Client Pc so many Viruses Spywares and .dll files detected on my Antivirus ... infact Two Microsoft.vbs Namely files automaticaly generated in C:\ Drive .. i think its Big problem .. could u have any idea why i have been recieved this problems ... ? i m to much Sad [&o] and i m Manage 2003 server with ISA 2006 Last 2 years but i have not been facing this types of any problems in my 2 years Little experiance. please Help me

Thanks Advanced



paulo.oliveira -> RE: Webproxy Authentication Error (8.Jul.2008 9:44:35 AM)

Hi,

quote:


Source: MS FW Client
Category: None
Event ID: 1 Application [svchost.exe]. Authentication failed. The user credentials were not accepted by ISA Server.  Verify that the user account running this application has the required permissions.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

are your clients configured as firewall and web proxy clients? This error usually occurs with firewall clients. Make sure ISA Firewall Client Application Settings show "svchost disable=1".
You do NOT want svchost process using the firewall client.
quote:

Second think : when i m browsing on my Client Pc so many Viruses Spywares and .dll files detected on my Antivirus ... infact Two Microsoft.vbs Namely files automaticaly generated in C:\ Drive .. i think its Big problem .. could u have any idea why i have been recieved this problems ... ? i m to much Sad [image]http://forums.isaserver.org/image/s14.gif[/image] and i m Manage 2003 server with ISA 2006 Last 2 years but i have not been facing this types of any problems in my 2 years Little experiance. please Help me

Check your computers using different AV solution, if the current is not detecting any viruses. After you scan with other AV try to identify the viruses and check how they propagate and try to stop them at ISA level.
And maybe change your current AV solution. [8D]

Regards,
Paulo Oliveira.



Intasar -> RE: Webproxy Authentication Error (8.Jul.2008 7:27:06 PM)

quote:

are your clients configured as firewall and web proxy clients? This error usually occurs with firewall clients. Make sure ISA Firewall Client Application Settings show "svchost disable=1".
You do NOT want svchost process using the firewall client


Hello paulo.oliveira

thanks for reply. Yes its Firewall and Web proxy Client Configuration.

and "svhost disable=1" is default so can i disable= it into 0" ?

Look the Screens of Default Disabled things ..

[image]http://www.roboimages.com/image/ri29756/123.JPG[/image]

[image]http://www.roboimages.com/image/ri29757/1234.JPG[/image]


quote:



Check your computers using different AV solution, if the current is not detecting any viruses. After you scan with other AV try to identify the viruses and check how they propagate and try to stop them at ISA level.
And maybe change your current AV solution.



i think a right choice is GFI Web Monitor but its slowing Browsing ... :(

hope u will understand my Problem [image]http://forums.isaserver.org/image/s14.gif[/image]




Page: [1]