RE: Log files firewall client etc..
- From: "Thomas W. Shinder" <tshinder@xxxxxxxxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Fri, 31 Aug 2001 11:34:58 -0500
Hi Adam,
When you force authentication, the web proxy client must send
credentials to access web content. It will send credentials whether they
are required or not. However, remember that the initial connection
attempt is always anonymous.
HTH,
Tom
www.isaserver.org/shinder
Thomas W Shinder, M.D., MCSE, MCT
-----Original Message-----
From: Adam.Staub@xxxxxxxxxxxxx [mailto:Adam.Staub@xxxxxxxxxxxxx]
Sent: Friday, August 31, 2001 11:23 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Log files firewall client etc..
http://www.ISAserver.org
I removed the Default site rules. I don't allow anonymous access. What
effect would forcing authenictation have on outbound connections?
Adam
-----Original Message-----
From: Thomas W. Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx]
Sent: Friday, August 31, 2001 11:12 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Log files firewall client etc..
http://www.ISAserver.org
Hi Adam,
The Web Proxy client only sends credentials if it can't "get away" with
an anonymous HTTP request. You have to remove any anonymous access rules
that will allow the client anonymous access. The most likely culprit is
the default Site and Content Rule.
Another thing you can do it force authentication on the outgoing web
requests listener.
HTH,
Tom
www.isaserver.org/shinder
Thomas W Shinder, M.D., MCSE, MCT
-----Original Message-----
From: Adam.Staub@xxxxxxxxxxxxx [mailto:Adam.Staub@xxxxxxxxxxxxx]
Sent: Friday, August 31, 2001 10:23 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Log files firewall client etc..
http://www.ISAserver.org
I've setup my machines to use the webproxy for internet access. I've
also
installed the Firewall Client on the machines. When I check the logs
I'm
showing anonymous outbound access. I thought that maybe it was do to
the
fact that I allow the SecureNat and Firewall clients access to the
through
the http redirector filter, so I disabled that. Still showing some
anonymous access. Also when I look at the active sessions I'm showing
firewall client activity there, even though these particular individuals
don't have any special access via the firewall client.
Thanks,
Adam
*********************************************************************
Note: This E-mail and any attachments may be privileged and confidential
and protected from disclosure. If the reader of this message is not the
intended recipient, or an employee or agent responsible for delivering
this message to the intended recipient, you are hereby notified that any
disclosure, copying, distribution or use of this E-mail and any
attachments is strictly prohibited. If you have received this E-mail in
error, please notify us immediately by returning it to the sender and
deleting it from your computer system. Thank you for your cooperation.
**********************************************************************
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
Adam.Staub@xxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
*********************************************************************
Note: This E-mail and any attachments may be privileged and confidential
and protected from disclosure. If the reader of this message is not the
intended recipient, or an employee or agent responsible for delivering
this message to the intended recipient, you are hereby notified that any
disclosure, copying, distribution or use of this E-mail and any
attachments is strictly prohibited. If you have received this E-mail in
error, please notify us immediately by returning it to the sender and
deleting it from your computer system. Thank you for your cooperation.
**********************************************************************
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
Other related posts:
