Critical Oracle problem

Hi

We use ISA Server 2004 to connect our internal network to an external
private network (not Internet). We have a requirement to allow clients on
our internal networks to access an Oracle database on the outside of the
firewall. This should (in theory) be easy, but we're having major problems.

Essentially, the external Oracle database (not under our control) uses NTS
authentication to verify the client identity, i.e., the line in the
SQLNET.ORA file is;

SQLNET.AUTHENTICATION_SERVICES= (NTS)

But we seem be having huge problems getting ISA to allow this authentication
to pass through. I have created a rule on the firewall that basically allows
ALL PROTOCOLS to and from the Oracle server to our internal clients. We have
a good, reliable connection to the server. Every time the clients try to
make a connection though, it times out. I've turned on debug tracing in the
client, and we get the following error;

ns main err code: 12638
TNS-12638: Credential retrieval failed

I've tried setting the SQLNET.AUTHENTICATION_SERVICES parameter to (NONE),
but this doesn't help. Is there any way I can get the ISA server to allow
this authentication to pass through the firewall. I know it's ISA, because
outside the firewall, the clients can connect fine.

Any Oracle/ISA gurus out there who can help?

Thanks



.

Relevant Pages

  • Re: htps client connexion pbs
    ... I just added two new home made protocols in Isa server. ... > Running SBS 2000 with XP clients. ... > works fine from SBS gateway machine. ... > open) as I rely on the Firewall appliance to handle security. ...
    (microsoft.public.windows.server.sbs)
  • Re: Blocking sites fails
    ... Single NIC mode only allows for Web Proxy configuration, no firewall ... effect on ext. servers the clients are trying to access. ... I am peased you had fun with your ISA experience. ... getting the ISA server on the same side of the router that the clients ...
    (microsoft.public.isaserver)
  • Re: disable HTTP Filter for some Users
    ... Proxy clients still use it. ... It just disables it for Firewall and SecureNAT ... machines that are configured as Web Proxy clients, ... Tom and Deb Shinder's Configuring ISA Server 2004 ...
    (microsoft.public.isa)
  • Re: Remove Username and Prompt from ISA2k4 Proxy
    ... are the clients using the firewall client?? ... logon and password prompt. ... This ISA server is only a proxy / logging server and it is internal to ...
    (microsoft.public.isa)
  • ISA with single NIC and external firewall
    ... I have an SBS2k system which has ISA server installed and a single NIC. ... There is also an external firewall running ... to use the DNS on SBS and set the gateway to the firewall. ... clients exit though the firewall under their own IP instead of ISA server ...
    (microsoft.public.isaserver)
Loading