• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

ISA 2006 Client Authentication time exceeded

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA 2006 General] >> General >> ISA 2006 Client Authentication time exceeded Page: [1]
Login
Message << Older Topic   Newer Topic >>
ISA 2006 Client Authentication time exceeded - 23.Feb.2009 6:47:21 PM   
praffael

 

Posts: 4
Joined: 23.Feb.2009
Status: offline
Hello All,

Hoping you can help
We are running ISA 2006 Ent SP1 3 servers in the array, multiple DC's over 1k sessions. On our main box we receive every 30 mins an alert "clent authentication time exceeded 5 seconds" I have looked at MS KB952082 and it shows how to change the alerts. I think its only a bandaid measure and is not resolving the real issue. I am unable to find any other information on this alert or how to resolve what client/authentication server is causing the problem. Any ideas????

penny
Post #: 1
RE: ISA 2006 Client Authentication time exceeded - 27.Feb.2009 10:25:20 AM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi Penny,

There is a KB article on how to support a high number of client authentication attempts on the ISA firewall. Have you seen that?

Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to praffael)
Post #: 2
RE: ISA 2006 Client Authentication time exceeded - 4.Mar.2009 1:59:58 AM   
praffael

 

Posts: 4
Joined: 23.Feb.2009
Status: offline
Hi Tom,

Which KB are you referring to ???

regards

penny

(in reply to tshinder)
Post #: 3
RE: ISA 2006 Client Authentication time exceeded - 4.Mar.2009 11:56:28 AM   
richardhicks

 

Posts: 477
Joined: 20.Jan.2009
From: Southern California
Status: offline
I believe that Dr. Shinder was referring to this article:

http://technet.microsoft.com/en-us/library/bb984870.aspx


_____________________________

Richard Hicks - Forefront MVP
http://tmgblog.richardhicks.com/
http://directaccess.richardhicks.com/

(in reply to praffael)
Post #: 4
RE: ISA 2006 Client Authentication time exceeded - 4.Mar.2009 8:05:41 PM   
praffael

 

Posts: 4
Joined: 23.Feb.2009
Status: offline
many thanks will check it out

(in reply to richardhicks)
Post #: 5
RE: ISA 2006 Client Authentication time exceeded - 22.Mar.2009 11:23:04 PM   
praffael

 

Posts: 4
Joined: 23.Feb.2009
Status: offline
Can anyone share with me their experiences/issues when implementing kerberos authentication with ISA 2006 for web proxy athentication only. we have a mixed environment of w2k, w3k & w8k. ta

(in reply to praffael)
Post #: 6
RE: ISA 2006 Client Authentication time exceeded - 23.Mar.2009 5:20:11 AM   
Jason Jones

 

Posts: 4663
Joined: 30.Jul.2002
From: United Kingdom
Status: offline
If the web browser is running >IE6 and the proxy server is defined as an FQDN, kerberos authentication should be fine.

This may help:

http://blogs.technet.com/isablog/archive/2008/06/26/understanding-by-design-behavior-of-isa-server-2006-using-kerberos-authentication-for-web-proxy-requests-on-isa-server-2006-with-nlb.aspx 

Cheers

JJ

_____________________________

Jason Jones | Forefront MVP | Silversands Ltd
My Blogs: http://blog.msedge.org.uk/ and http://blog.msfirewall.org.uk/

(in reply to praffael)
Post #: 7

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA 2006 General] >> General >> ISA 2006 Client Authentication time exceeded Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts