IE - Authentication prompt once
- From: "Mark" <marcoswelker@xxxxxxxxxxx>
- To: isalist@xxxxxxxxxxxxx
- Date: Mon, 16 Sep 2002 14:14:54 -0600
Hi Guys,
I´m dealing with an organization with 90.000 workstations and ISA Server
will be the proxy solution.
I´ve had some problems concerning MSN, ICQ etc... but it´s now solved (for
more info, see att. at the end of the message).
Users can access all sites and use all protocols (no problem with that).
Problem:
Users are being asked for authorization The first time the use IE. After
this first login their credentials are stored and they are not asked for
U.ID. and PSW anymore.
Scenario:
- W2K domain.
- All clients use Firewall Client software.
- Site and Protocol rules are wide open and based on groups.
- The is only one Deny rule to a specific site.
- "Ask unauthenticated users for identification" is checked.
- Logs are perfect and you see no "anonimous" users.
Please, if you could help I´d be very grateful.
I´m approaching the project´s deadline.
Thanks,
Mark
----------------------------------------------------------
There are two problems in this situation:
1. In ISA Management, application filters, there´s one filter called:
"HTTP redirector filter". If you check out it´s properties you´ll see that
it redirects your firewall requests to web proxy requests cancelling your
authentication. This way MSN, Yahoo, ICQ won´t pass through ISA. Set if
for "Send to requested Web server".
2. There´s a BUG in the Firewall client application. Uncheck
"Automatically detect ISA Server".
After doing this configuration, you´ll see that a small green ball with a
white point in it will appear on the Firewall client ICON.
Hope this will help.
Other related posts:
