The newest Sun Java Plugin does a pretty decent job with authenticating through proxies, as long as you have basic enabled. It croaks something fierce with Digest and you can, of course, wait until the cows come home before they support NTLM. -Shawn -----Original Message----- From: cismic [mailto:cismic@xxxxxxx] Sent: Friday, April 30, 2004 7:51 PM To: [ISAserver.org Discussion List] Subject: [isalist] Re: Need a Solution on FWC and Application Requiring HTTP Access http://www.ISAserver.org I use Java to do some testing and this is what should be the newest. Hi this is the newest: Java(TM) Plug-in: Version 1.3.1_09 Using JRE version 1.3.1_09 Java HotSpot(TM) Client VM User home directory = C:\Documents and Settings\USERNAME Proxy Configuration: no proxy ---------------------------------------------------- c: clear console window f: finalize objects on finalization queue g: garbage collect h: display this help message l: dump classloader list m: print memory usage q: hide console Joseph ----- Original Message ----- From: "Jim Harrison" <jim@xxxxxxxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Sent: Friday, April 30, 2004 3:22 PM Subject: [isalist] Re: Need a Solution on FWC and Application Requiring HTTP Access http://www.ISAserver.org If you can't configure the app (Java; yuk!) to use the proxy directly, you doth be much screwed. You might want to see if the JRE you have installed on that host is the most recent (from where ever you got it). This has been the solution for many java-based apps that want to make requests through an authenticated proxy. Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://www.microsoft.com/isaserver http://isaserver.org/Jim_Harrison http://isatools.org Read the help, books and articles! ----- Original Message ----- From: "Kincer, Rick" <Rick_Kincer@xxxxxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Sent: Friday, April 30, 2004 09:36 Subject: [isalist] Need a Solution on FWC and Application Requiring HTTP Access http://www.ISAserver.org Hello all, Could someone refresh my memory, on this solution? I have ISA2000 Enterprise edition installed in Integrated mode in an NT 4.0 network. Using No SecuureNAT only Web Proxy and the FWC, the HTTP Redirector is set to Reject HTTP (This must be since we use SmartFilter to filter access, but that's another story). I have a user running an app which connects to IBM's web site to gather documents (Softcopy Librarian). The application's proxy settings are set to not use proxy so it will go through the FWC, however since I have the redirector set to deny http using the connection fails. I have changed the redirector settings to send to the requested webpage and it works....but I can't use that because the redir must be set to Reject HTTP... So then I placed the name of the application executable into the FWC setup, set it to Deny with a setting of one, this will force the app Not to use the FWC but use the WebProxy. Then went into the app and set the proxy settings to use the proxy server. In testing, this fails...I get a message from the app stating: "java.net ConnectException: Connection Refused: connect" There was a way to get a Winsock app out via HTTP without using the Redir. but I am at a loss to recall what the solution was...Does anyone have a suggestion or better yet a solution..<g>...? Thank you all for you time!! Rick ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: cismic@xxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: shawn.quillman@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')