Re: Anonymous connections in proxy log on ISA2004

From: Kevin Longley (kwlongley_at_cirtronics.com)
Date: 03/03/05 

Date: Thu, 3 Mar 2005 17:56:04 -0500

This may partially answer you. When Internet Explorer attempts access
through the isa firewall it sends the inital request as an anonymous
request. If there is a rule setup that requires authentication then isa
requests credentials.
"laney0906" <laney0906@discussions.microsoft.com> wrote in message
news:F25E9696-2907-4FE3-9B08-7F7259099001@microsoft.com...
>I have ISA2004 Std detup in a unihomed config. I only want it as a Web
>proxy
> upstreaming to another proxy product as I have other firewall on the
> network
> performing the firewall tasks
>
> I have configured an access rule to allow all requests from Internal to
> External
>
> In "Networks" I have configured Internal to be my subnet that has my web
> proxy clients in it. I have Enabled Web proxy clients for this network
> group
> on port 80. I have also setup "Require all clients to authenticate using
> Basic Authentication. (NT4.0 Domain)
>
> I have then setup Web Chaining to the upstream proxy and have set this to
> redirect all requests (http and https)as port 8080.
>
> Everything is working fine, and my web proxy clients can access the
> internet
> over http and https. HOWEVER and this is the strange thing
>
> When a client accesses a website I get a load of Anonymous denied
> connections in the web proxy log.
>
> The first connection from the client shows the client IP, username and
> that
> it has authenticated ok, it shows the rhost and r-ip as the upstream
> proxy.
> It then shows 4-5 anonymouse connections from the same client IP with the
> remote host being the URL of the internet site but the RIP being the ISA
> server. As this si an anonymouse connection it denies the packet.
>
> I dont think this is causing any major problems, but it defo doesn't look
> right..Does anyone know why this is happening and if it is actaully
> causing
> problems and if I can change or do anything to resolve it
>

Relevant Pages

  • Re: Firewall override proxy ??
    ... Second, if a proxy is set in the Internet Options dialog, AFAIK the request ... The firewall client will take over only for 'direct' requests (like ...
    (microsoft.public.isa)
  • Re: Rerouting Requests via a Proxy because of .NET "bug"
    ... and you say these request are not seeing your ... client configuration for proxy servers, then it is very likely that there ... load code to use a proxy. ... >> discovery script to determine the proxy server settings. ...
    (microsoft.public.dotnet.framework.webservices)
  • Re: How to obtain the Clients IP address , when the web server is published with ISA
    ... the request so that your web app can request that header and get the information it wants. ... If you only want to see the client IP as part of the TCP/IP connection data, then you have no choice but to server publish. ... Server publishing in ISA2000 is completely devoid of the HTTP-smarts that come with the web proxy. ...
    (microsoft.public.isaserver)
  • Re: how to reach a computer over a proxy?
    ... Sometimes Web proxies are misconfigured to accept client requests from ... but iyou can try to access the proxy at the ... >> on to the Web servers in the request headers, others do not, such as ...
    (comp.security.firewalls)
  • Re: breaking the model
    ... > The forms data then is in the Request object. ... HTTP Request; in this case, the form POST Request from the Page. ... client and server. ...
    (microsoft.public.dotnet.framework.aspnet)