RE: Firewall authentication problems
- From: "Phil Clark" <pc@xxxxxxxxxxxxxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Wed, 24 Oct 2001 17:05:59 +0100
RE: The internal clients accessing your external web site, you need to
add a host entry to your DNS server with the ip address for your hosted
www site.
Cheers
Phil
-----Original Message-----
From: Ian Sterling [mailto:isterling@xxxxxxxxxxxxxxx]
Sent: 24 October 2001 15:27
To: [ISAserver.org Discussion List]
Subject: [isalist] Firewall authentication problems
http://www.ISAserver.org
I am having an annoying issue with ISA at my office. I have a single
BackOffice 2000 server running ISA (Standard) in integraged mode, in
conjunction with the machine acting as my DC, Exchange server and SQL
server. All clients are running Windows 2000 Pro SP-2 with all security
patches run. I have a client address set created which covers my entire
subnet, and all clients have the mspclient installed and active.
The problem that I am having is two-fold. Let me explain the first
issue: some clients are prompted with an authentication dialog after
logging on to the domain. This logon box is for the FireWall on the
server, however, no user name, password or domain name will allow access
through, even the administrator can't get through at times. After being
unable to authenticate, the user is redirected to an ISA 407 Error page
(Authentication Required). Full Text {HTTP 407 Proxy Authentication
Required - The ISA Server requires authorization to fulfill the request.
Access to the Web Proxy service is denied. (12209)}
The other problem that I have is that my internal Win2k domain is the
same (bec-memphis.com with netbios domain name of bec-memphis) as my
registered (and hosted) web domain (www.bec-memphis.com with the
exception of the www). We also have the domain without the hyphen.
Internal clients including the server can hit the domain if we put the
unhyphenated domain name in the address bar, but with the hyphen in the
domain name we get the same 407 error.
Does anyone have any suggestions? I would appreciate any help.
Thank you,
Ian Sterling
SysAdmin
Business Equipment Center, Inc.
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
pc@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
Other related posts:
