Announcement

Collapse
No announcement yet.

ISA and Authentication

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • ISA and Authentication

    Hi All,

    • We are using ISA server 2006 as web proxy in our environment.


    • For web proxy clients, basic authentication is set. Only authenticated users are allowed to pass their traffic through ISA.


    • All the outbound traffic is allowed.


    • IM softwares like MSN and Yahoo are working fine with all the clients except one.


    • There is a single client who can log on to MSN using ISA, but cannot login to Yahoo.


    • I did traffic monitoring in ISA, when the client tries to access Yahoo messenger ISA gives following error


    "12209 The ISA server requires authorization to fullfill the request. Access to web proxy filter is denied"

    Now that seems like an authentication failure. The interesting thing is that the same user can browse internet using internet explorer via ISA.


    can anybody give me any idea whats going wrong here?

  • #2
    Re: ISA and Authentication

    It might be that the Yahoo messenger doesn't pass the authentication.
    Try to use the firewall client on that machine.
    Marcel
    Technical Consultant
    Netherlands
    http://www.phetios.com
    http://blog.nessus.nl

    MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
    "No matter how secure, there is always the human factor."

    "Enjoy life today, tomorrow may never come."
    "If you're going through hell, keep going. ~Winston Churchill"

    Comment


    • #3
      Re: ISA and Authentication

      I'd agree with Dumber. Very few non-Microsoft applications support Integrated Windows Authentication, and many that are proxy aware and allow you to fill in the ISA IP, username and password still don't work. I've had this problem with Macromedia Dreamweaver's FTP client and it was only after installing the Firewall Client it worked.
      BSc, MCSA: Server 2008, MCSE, MCSA: Messaging, MCTS
      sigpic
      Cruachan's Blog

      Comment


      • #4
        Re: ISA and Authentication

        it doesnt makes sense. there are 10 pcs that use web via that ISA server. all other pcs are able to access EVERYTHING including Yahoo.

        only this one pc is unable to pass through.

        Comment


        • #5
          Re: ISA and Authentication

          Not quite. When they are configured as Web proxy client only then the only traffic they are allowed to use is HTTP/HTTPS/FTP over HTTP.
          Or are they also be´ng configured as a SecureNat client. Although SecureNat clients doesn't authenticate.

          Maybe It's a different yahoo messenger version?
          Marcel
          Technical Consultant
          Netherlands
          http://www.phetios.com
          http://blog.nessus.nl

          MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
          "No matter how secure, there is always the human factor."

          "Enjoy life today, tomorrow may never come."
          "If you're going through hell, keep going. ~Winston Churchill"

          Comment


          • #6
            Re: ISA and Authentication

            nope, they are not configured as secure nat clients. all clients are web proxy clients. Yahoo version doesnt makes a difference, from error message its clear that its ISA which is not letting the traffic through.

            Comment


            • #7
              Re: ISA and Authentication

              hey it might be worth looking at the browser settings/version, are they the same versions/authentication settings on all the clients?i believe messenger uses components of IE and i have had similar issues with ISA authentication and different web browsers/versions
              Last edited by hazey; 17th July 2009, 08:43.

              Comment


              • #8
                Re: ISA and Authentication

                Originally posted by outstream View Post
                nope, they are not configured as secure nat clients. all clients are web proxy clients. Yahoo version doesnt makes a difference, from error message its clear that its ISA which is not letting the traffic through.
                No there is where you go wrong. It's is not an ISA issue....
                ISA is configured to demand authentication. The client application isn't passing the authentication to the ISA server. The problem lies on your client and not on the ISA server.
                Marcel
                Technical Consultant
                Netherlands
                http://www.phetios.com
                http://blog.nessus.nl

                MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
                "No matter how secure, there is always the human factor."

                "Enjoy life today, tomorrow may never come."
                "If you're going through hell, keep going. ~Winston Churchill"

                Comment


                • #9
                  Re: ISA and Authentication

                  i dont know where the problem was...but its solved.


                  changed authentication in ISA from integrated to basic.


                  now, everything works the way i wanted it to work.

                  thanks all

                  Comment

                  Working...
                  X