• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Status: 12209 The ISA Server requires authorization to fulfill the request. Access to the Web Proxy

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2004 Firewall] >> General >> Status: 12209 The ISA Server requires authorization to fulfill the request. Access to the Web Proxy Page: [1]
Login
Message << Older Topic   Newer Topic >>
Status: 12209 The ISA Server requires authorization to ... - 18.Jun.2009 1:18:34 PM   
kabirhussein@nikonop

 

Posts: 6
Joined: 21.Nov.2007
Status: offline
Hi All


I am trying to access application which uses the web..but everytime i try go on this program i get the following error..

The request failed with HTTP status 407: Proxy Authentication required (the ISA Server required Authorisation to fulfill the request. Access to the Web Proxy is denied)

I have checked on the ISA logs and this is the error log

Denied Connection UKNS003 6/18/2009 11:04:41 AM
Log type: Web Proxy (Forward)
Status: 12209 The ISA Server requires authorization to fulfill the request. Access to the Web Proxy service is denied. 
Rule: deny internet
Source: Internal (uknl207.nikonopticaluk.local 10.100.8.77:0)
Destination: External ( 10.100.8.1:3128)
Request: POST http://demo.optix.co.uk/oeconfigws_trunk/service.asmx
Filter information: Req ID: 0c429a13 
Protocol: http
User: anonymous

I have tried adding the Request POSt but no luck...all normal websites work for me..

Any suggestions. I even tried removing the Deny Internet rule..but no luck

Many thanks in advance

Kabir
Post #: 1
RE: Status: 12209 The ISA Server requires authorization... - 19.Jun.2009 1:09:55 AM   
richardhicks

 

Posts: 477
Joined: 20.Jan.2009
From: Southern California
Status: offline
It appears that your access rule requires authentication, but your web application is not handling the challenge for authentication (HTTP 407) appropriately.  You'll need to either remove the requirement for authenticaiton on the rule (not a good idea), investigate ways that your application can more appropriately handle the challenge for authentication, or use the Firewall Client as it always provides authentication with each request.  If you are going to use the Firewall Client, make sure you configure the ISA firewall to bypass the web proxy for this domain so that the communication is handled by the Firewall Client.

_____________________________

Richard Hicks - Forefront MVP
http://tmgblog.richardhicks.com/
http://directaccess.richardhicks.com/

(in reply to kabirhussein@nikonop)
Post #: 2
RE: Status: 12209 The ISA Server requires authorization... - 19.Jun.2009 4:21:24 AM   
kabirhussein@nikonop

 

Posts: 6
Joined: 21.Nov.2007
Status: offline
Hi Richard

Many thanks for the help...im still a bit confused this application i am using is from another vendor....but when i try run the app without our proxy enabled...i can get to the login page...but if i tick the proxy....i get the error message on 1st post..

Im not sure how to do this as we dont use the firewall client on the ISA...just the proxy to specify what sites users can go on...

Firewall is disabled we use another firewall which is working fine as without the proxy i can get to the login of this page....

Many thanks in advance

(in reply to richardhicks)
Post #: 3
RE: Status: 12209 The ISA Server requires authorization... - 19.Jun.2009 12:04:00 PM   
richardhicks

 

Posts: 477
Joined: 20.Jan.2009
From: Southern California
Status: offline
This is precisely my point...it works through your other firewall because it is not capable of performing authentication, so your application works. The ISA firewall with its advanced capabilities can request authentication, and it does that via the HTTP 407 response (challenge for authentication).  If you remove the authentication requirements from the access rule it should work, but of course now you won't be able to control access by users and/or groups.  In this case you may want to create another access rule that allows anonymous access to this specific destination, and place that rule ahead of the rule that allows general authenticated access to all Internet destinations.

_____________________________

Richard Hicks - Forefront MVP
http://tmgblog.richardhicks.com/
http://directaccess.richardhicks.com/

(in reply to kabirhussein@nikonop)
Post #: 4
RE: Status: 12209 The ISA Server requires authorization... - 29.Jun.2011 5:30:46 PM   
THX

 

Posts: 107
Joined: 8.Aug.2007
Status: offline
Could another valid method to perform this action is to perform the following:

Put the website's domain address into the "Direct Access" box in the Web Browser tab from the Internal network dialog box?

Because this essentially bypasses the web proxy filter. Or, am I barking-up the wrong tree?

(in reply to richardhicks)
Post #: 5
RE: Status: 12209 The ISA Server requires authorization... - 29.Jun.2011 5:35:25 PM   
THX

 

Posts: 107
Joined: 8.Aug.2007
Status: offline
Also, have you found any rhyme or reason why some websites cannot properly handle the HTTP 407 response?

Do hardware firewalls (i.e. non-ISA\TMG firewalls) also suffer from this fate?

Thanks.

(in reply to THX)
Post #: 6

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2004 Firewall] >> General >> Status: 12209 The ISA Server requires authorization to fulfill the request. Access to the Web Proxy Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts