RE: ISA 2004 & IE Authentication

where and how you extract such info from the monitoring option in ISA? How
can I configure it?!

"Felipe" wrote:

> Florencia,
>
> I have the same problem. And I noted it after applying Win2003 SP1. My
> server was installed yesterday.
>
> Doing a network monitoring, I note the following:
>
> 1-IE ask ISA for the page (this request was sent anonymously)
> 2-ISA reply requesting credentials.
> 3-IE then send the credentials.
> 4-ISA reply chalenging credentials.
> 5-IE then send the final credentials.
> 6-ISA reply wih the Data.
>
> All this was done using the same socket.
>
> For reasons that I don't know, sometimes in step 6 isa refuses to send data
> and close the socket (actually reset it). When this happens, IE ask for the
> user password.
>
> I think steps 3 to 5 are responsible for the NTLM authentication.
>
> But one thing is sure: The problem occurs when isa closes the socket with
> tcp flag: R - reset connection in step 6.
>
> In the same monitoring session, I observe that this steps occurs fine
> several times (and user was never asked to provide credentials), and some
> times isa reset the connecttion.
>
> I observe also that all this steps are done using the same socket.
>
> I hope this will help you in finding someone to help.. I'm doing the same
> here.
>
> Soon as I got some news, I'll post here.
>
> Felipe
>
>
>
>
> "Florencia" wrote:
>
> > There was a mistake in the post. Here is my question...
> >
> > I'm using ISA 2004 sp1 in AD 2003 environment. Internet users are members
> > in AD group. The Firwall policy is permitting Internal user to connect to
> > External and it is restiricted for AD group members only. Authentication for
> > the web proxy on the internal network is configured to use Basic, Integrated,
> > and Require all users to authenticate is selected. Everything was working
> > fine, untill few days back. Some users need to authenticate before access the
> > internet and the rest is working still fine. They are still a part of the
> > Global Security Group and the ISA rule is not
> > changed. On the clients system also nothing changed. Users have the correct
> > settings on the IE. Even With or without that option it
> > is asking for authentication every time they open the IE. Advice please
> >
> >
> > "Florencia" wrote:
> >
> > > Require all users to authenticate I'm using ISA 2004 sp1 in AD 2003
> > > environment. Internet users are members in AD group. The Firwall policy is
> > > permitting Internal user to connect to External and it is restiricted for AD
> > > group members only. Authentication for the web proxy on the internal network
> > > is configured to use Basic, Integrated, and Require all users to authenticate
> > > is selected. Everything was working fine, untill few days back. Some users
> > > need to
> > > authenticate before access the internet and the rest is working still fine.
> > > They are still a part of the Global Security Group and the ISA rule is not
> > > changed. On the clients system also nothing changed. Users have the correct
> > > settings on the IE. Even With or without that option it
> > > is asking for authentication every time they open the IE. Advice please
> > >
>
>
.

Relevant Pages

  • Re: Proxy Authentication
    ... still learning ISA and how to fully leverage it...the setting that you ... I do have a rule for internet access, where by certain groups and users are ... where I was mentioning the "admin" thing. ... > confusing the "per proxy listener" authentication (the option I am talking ...
    (microsoft.public.isa)
  • Re: re:Authentication Prompts in IE
    ... - My Deny rules don't require authentication. ... rules - anyone that has valid credentials can navigate).. ... - My ISA is not configured with 'Require Authentication For All users'. ... Because ISA is configured to only use NTLM, ...
    (microsoft.public.isa.clients)
  • RE: anonymous access rule and authetication rule
    ... the group access since it would evalute the "all users" rule first? ... Sorry, I love the ISA server, but still failry new with it. ... require authentication to fullfill your needs. ... I am trying to setup rules that will allow all users access to the internet ...
    (microsoft.public.isaserver)
  • RE: anonymous access rule and authetication rule
    ... Sorry, I love the ISA server, but still failry new with it. ... require authentication to fullfill your needs. ... I am trying to setup rules that will allow all users access to the internet ...
    (microsoft.public.isaserver)
  • RE: anonymous access rule and authetication rule
    ... Sorry, I love the ISA server, but still failry new with it. ... require authentication to fullfill your needs. ... I am trying to setup rules that will allow all users access to the internet ...
    (microsoft.public.isaserver)