RE: Anonymous Web Proxy Access

  • From: "Jim Harrison" <Jim@xxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Wed, 7 Dec 2005 13:20:50 -0800

You can't force any such thing.
All browsers make their first requests as anonymous. 


-------------------------------------------------------
   Jim Harrison
   MCP(NT4, W2K), A+, Network+, PCG
   http://isaserver.org/Jim_Harrison/
   http://isatools.org
   Read the help / books / articles!
-------------------------------------------------------
 

-----Original Message-----
From: Thor (Hammer of God) [mailto:thor@xxxxxxxxxxxxxxx] 
Sent: Wednesday, December 07, 2005 13:16
To: [ISAserver.org Discussion List]
Subject: [isalist] Anonymous Web Proxy Access

http://www.ISAserver.org

When one limits access to outbound Web rules by replacing  "All Users" with a 
domain group, and in turn set the Web Proxy Authentication to require all users 
to authenticate, 3 web log files are created for a single GET request:

DestHost                     DestHostIP          ErrorCode         Action
www.google.com         10.1.1.2                0                  Denied
www.google.com         10.1.1.2               128                Failed
www.google.com         216.239.37.104    1152              Allowed

I understand why, as the client is only set up for Web Proxy.  Is loading the 
firewall the only way to force the initial client request to authenticate as 
the user?

t 


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as: 
jim@xxxxxxxxxxxx To unsubscribe visit 
http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx

All mail to and from this domain is GFI-scanned.



Other related posts: