RE: MBSA, Media Player use Web Proxy not FW
- From: "Ball, Dan" <DBall@xxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Tue, 6 Sep 2005 10:35:57 -0400
Yes, it has to do with the way the webservers dish it out. This is
related to the last message I sent, it is a known problem with ISA. We
especially have problems with www.nrp.org, a LOT of their clips won't
play without entering in credentials. Even then it is hit-or-miss on
whether it works or not.
-----Original Message-----
From: Paul Deen [mailto:pdeen@xxxxxxxxxxxx]
Sent: Tuesday, September 06, 2005 10:26 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: MBSA, Media Player use Web Proxy not FW
http://www.ISAserver.org
Hi Thomas,
Thanks for the reply. I checked and I do have that option enabled
(Integrated Authentication on the advanced tab of IE). I also have the
option for HTTP 1.1 through a proxy connections.
Here is the odd thing I noticed today, that maybe it depends on the
site. If my boss goes to cnn.com and watches a WMP clips, it works fine.
But, if he goes to abc.com (the main page has a clip), it prompts him
for credentials.
Is it the way the website serves up the media clip in a different way
maybe?
Thanks,
Paul Deen
Network Admin
Carneiro, Chumney & Co., L.C.
Helping Clients Succeed for More Than 75 Years
NOTICE: The contents of this email and any attachments to it may contain
privileged and confidential information from Carneiro, Chumney & Co.
L.C. This information is only for the viewing or use of the intended
recipient. If you are not the intended recipient, you are hereby
notified that any disclosure, copying, distribution or use of, or the
taking of any action in reliance upon, the information contained in this
e-mail, or any of the attachments to this e-mail, is strictly prohibited
and that this e-mail and all of the attachments to this e-mail, if any,
must be immediately returned to Carneiro, Chumney & Co. L.C. or
destroyed and, in either case, this e-mail and all attachments to this
e-mail must be immediately deleted from your computer without making any
copies thereof. If you have received this e-mail in error, please
notify Carneiro, Chumney & Co. L.C. by e-mail immediately.
-----Original Message-----
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx]
Sent: Friday, September 02, 2005 4:30 PM
Subject: RE: MBSA, Media Player use Web Proxy not FW
Hi Paul,
Try configuring IE to use Integrated Authentication. You can do that on
the Advanced tab of the Inet Properties box.
HTH,
Thomas W Shinder, M.D.
Site: www.isaserver.org
Blog: http://spaces.msn.com/members/drisa/
Book: http://tinyurl.com/3xqb7
MVP -- ISA Firewalls
> -----Original Message-----
> From: Paul Deen [mailto:pdeen@xxxxxxxxxxxx]
> Sent: Friday, September 02, 2005 2:48 PM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: MBSA, Media Player use Web Proxy not FW
>
> http://www.ISAserver.org
>
> We have pretty much the same setup (as far the clients) and we
> experience the same things.
> We have a rule for HTTP, HTTPS, MMS, RTSP, FTP, SSH; in which
> we require
> authentication.
> Windows Media Player always ends up prompting us to type in
> credentials
> manually, and then it works. Like most all other apps, I see
> it attempt
> anonymous and get denied, but then it never sends credentials
> automatically like other apps do. I always figured this was a
> WMP flaw.
> I have tried different setting inside WMP on the network tab, but the
> problem is the credentials, not it finding the proxy server.
>
> If/when you hear anything I would be interested also.
>
> Thanks,
> Paul
>
>
> -----Original Message-----
> From: Mike May [mailto:mmay@xxxxxxxxxxx]
> Sent: Thursday, September 01, 2005 11:21 AM
> Subject: MBSA, Media Player use Web Proxy not FW
>
> My ISA 2K4 clients are set up as both Web Proxy and Firewall Clients
> (and
> secureNAT, for that matter), automatically configuring from
> the server.
> Most everything works fine, but today I tried using MS
> Baseline Security
> Analyzer and my boss tried using Windows Media Player and
> neither would
> work. Checking the log, I noticed that both were using Web Proxy
> connections to ISA and that these were anonymous. The Media Player
> problem has been temporarily solved by logging on using the
> logon dialog
> that Windows presented when he tried to connect, but MBSA doesn't
> trigger
> one for me, boo-hoo.
>
> Anyway, I really want to know whether my current client
> config is dodgy,
> why I seem to have multiple connections to ISA (currently, I have 2 x
> secureNAT, 2 x FWC, 1 x unauthenticated proxy and 1 x authenticated
> proxy
> from my Media Player experimentation), why these apps are using Web
> Proxy
> rather than FWC.
>
> Thanks for any help/advice that you may have, even if it's just a
> pointer
> to the ISA online help or the Schinder book.
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion
> List as: tshinder@xxxxxxxxxxxxxxxxxx
> To unsubscribe visit
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
>
>
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
dball@xxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
Other related posts:
