Welcome to ISAserver.org

multiple Authentication to white list sites

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Firewall] >> Access Policies >> multiple Authentication to white list sites

Page: [1]

Message

<< Older Topic Newer Topic >>

multiple Authentication to white list sites - 10.Sep.2008 6:53:55 AM

popyb

Posts: 1
Joined: 10.Sep.2008
Status: offline

Hey Guys,

Im having a hard time fixing this multiple authentication issue and would apreciate any guidance that can be provided.

here's oursetup
2 x ISA 2006 NLB configured for CSS
upstreaming to an external Proxy servers using basic authentication.
Rule 1 = Allow HTTP Access to Whitelist Domain Name Set for All Users
Rule 2 � Allow HTTP Access to External for Internet Access group

We want to setup our ISA to allow all users access to the white-list sites and for the Internet Access group to have unrestricted interternet access. However we also want users who donot belong to the Internet Access group to propmpt for authentication if they try to access any sites not listed in the white-list.

This was sucessfully done by following this acticle
http://msdn.microsoft.com/en-us/library/ms826234.aspx
which changes the "ReturnAuthRequiredIfAuthUserDenied" setting.

The issue I have now is that any users not in the Internet Access group are being prompted for multiple authentication when accessing whitelist sites, this can be worked around by either authenticating or just by clicking cancel and the whitelist site loads up but then the authentication keeps on poping up.

This issue does not occur wen you authenticate with a user that belongs to the Internet Access group.

I've also tried this article without sucess
http://support.microsoft.com/kb/297080 (RemoveRedundantProxyAuthorization)

Please note: we also experienced this authentication issue before coming across the issue above, but this was fixed. i'm not certain if its related.
Random authentication prompts but does not accepting any credentials, NETLOGON error Event 5719 - was fixed by making the netlogon server dependent on the firewall service.

I hope some out there have been through this.

Cheers,
Popy