Re: ISA 2004 HTTP Filter



This is a web publishing cenario
the ISA server belongs to one domain, users authenticate to the isa
with certificate before being allowed to the published site, because
ISA cannot delegate certificate authentication to the published site
users have to authenticate again with basic authentication to the
internal site.
I want to allow authentication only with a user from a specific domain,
and to "filter out" all attempts to use basic authentication with other
domains.
I want to be able to find a way to create a signature the will match
"Domain\'" or "@domain" to the restricted domains.
ZVR wrote:
That is not called a "filter", filters are specific addons that install as
plugins in ISA and integrate with the existing mechanisms to provide
additional functionality. You are merely using the signature blocking
functionality of the ISA web filter.

Before we dwell into this... what exactly are you trying to accomplish? That
will help us come up with some suggestions.

Virgil



"GALBARZ" <GalBarz@xxxxxxxxx> wrote in message
news:1139491566.026440.281970@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Hi
How can I create a filter in a web publishing rule - the filter must
catch authorization header - but one that represents logon to a specfic
domain, meaning - cathing basic authentication to an internal domain
while allowing authentication to other domains.
Im trying to create a signature filter based on catching "Domain\" or
"@domain".
I have only succeeded in catching the whole authentication string for a
specific user!

Thanks!


.



Relevant Pages

  • Re: ISA 2004 HTTP Filter
    ... NTFS security will not help in this case, ... The problem is that I need to filter only the part with the domain name ... I want to allow authentication only with a user from a specific domain, ... The easiest way to achieve this if you're using IIS would be to leave ISA ...
    (microsoft.public.isa)
  • Re: Question For Any FrontPage Users Publishing Webs from SBS 2003
    ... I have made the changes to my ISA configuration that you suggested. ... > Thanks for using SBS newsgroup. ... > Frontpage through ISA2004 via either web folder or frontpage. ... Please disable request authentication on ISA to allow the anonymous ...
    (microsoft.public.windows.server.sbs)
  • Re: RSA with OWA and FBA
    ... So RSA SecurID running on ISA doesn't support SSO. ... Troubleshooting Unsupported Configurations in ISA Server 2004 ... SecurID authentication on ISA Server: ...
    (microsoft.public.isa)
  • Re: Forms authentication - change password
    ... It seems ISA could find some URL resource. ... I think your authentication validation method needs to be set to ... the change password feature ... Microsoft Online Partner Support ...
    (microsoft.public.isa)
  • Re: Forms authentication - change password
    ... It seems ISA could find some URL resource. ... I think your authentication validation method needs to be set to ... the change password feature ... Microsoft Online Partner Support ...
    (microsoft.public.isa)