ISA Clients, Web Proxy / Automatic Configuration (Cross Post)

microsoft.public.isa.clients - Microsoft Internet Security and Acceleration


ISA Clients >> Web Proxy / Automatic Configuration (Cross Post)

by Chris » Sat, 06 May 2006 01:26:23 GMT

I have Auto Discovery and Web Proxy setup and working on my ISA system,
however when I use automatic configuration on the browser, it prompts
for a Username/Password. Isn't there a way to make this use integrated
instead (Using SecureNAT)? I have Integrated checked in the
Authentication portion. Or will I be stuck using Firewall client to
bypass that? If I use the Proxy settings directly (without automatic
Configuration) - It doesn't prompt... Is there something I am missing?


I apologize if anyone is offended by the cross posting, I just wasn't
sure which newsgroup to put this in.

Top

ISA Clients >> Web Proxy / Automatic Configuration (Cross Post)

by ZVR » Sat, 06 May 2006 05:22:11 GMT


> If I use the Proxy settings directly (without automatic

You probably have "require all users to authenticate" enabled in the
properties of the web proxy listener. DON'T do that; instead, if you want to
control the access based on users/groups, make sure that your rules are not
anonymous (don't create rules for "All Users", use specific users/groups
instead, like "Authenticated Users" or "Domain Users" for example).

Virgil

P.S. No problem with the crosspost... bad would have been been to create an
indepedent thread in each of the newsgroups...
Top

ISA Clients >> Web Proxy / Automatic Configuration (Cross Post)

by Chris » Mon, 08 May 2006 21:44:50 GMT

I got a response on "isaserver.org":

http://forums.isaserver.org/m_2002015664/mpage_1/key_/tm.htm #2002015666

Make sure your ISA is SPacked and apply
SkipAuthenticationForRoutingInformation
http://support.microsoft.com/default.aspx?scid=kb ;en-us;885683

Any ideas on any problems this may cause? I did try it and it doesn't
prompt anymore...

One reason for the require authentication on the listener is it is
recommended by my Web Filter program I use (SurfControl for ISA)..
However maybe changing the rule will fix it... I'll have to
investigate..
Top

ISA Clients >> Web Proxy / Automatic Configuration (Cross Post)

by ZVR » Mon, 08 May 2006 22:35:18 GMT

> Make sure your ISA is SPacked and apply

You are implementing a workaround for a problem that still exists. Other
than that no problem.


Forget about "vendor recommendations" for once and do your own research. You
may find out, God forbid, that the advice you received in the first place
was correct.

Virgil
Top

ISA Clients >> Web Proxy / Automatic Configuration (Cross Post)

by Phillip Windell » Mon, 08 May 2006 23:09:46 GMT


You


You mean SurfControl works fine wtihout the checkbox checked that everyone
has always said must be checked?

--
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com
Top

ISA Clients >> Web Proxy / Automatic Configuration (Cross Post)

by The Gesus » Mon, 08 May 2006 23:31:43 GMT


Sure, if you think an IP address is a person and that IP address always uniquely
identifies that user for all time (DHCP kills that idea).

SurfControl also has a service that runs on DCs to identify users, but our
admins don't like "3rd party crap" running on DCs (I can hardly blame them).

However, even with the DC plug-in SurfControl CANNOT identify individual users
on Terminal (or Citrix) Servers. You need to check "the check box that everyone
always said must be checked" (TCBTEASMBC) in order to identify those users.
There is no other way.

The same is true for Websense.
Top

ISA Clients >> Web Proxy / Automatic Configuration (Cross Post)

by Phillip Windell » Mon, 08 May 2006 23:44:04 GMT

That's what I thought..

--
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com




uniquely
them).
users
everyone
users.
Top

ISA Clients >> Web Proxy / Automatic Configuration (Cross Post)

by Chris » Tue, 09 May 2006 01:32:07 GMT

I can get away with that unchecked and making the web rule require
Authenticated Users... If I don't use authenticated users on the rule,
then (as stated by The Gesus) all I get is IP address as the user.

I haven't heard of the 3rd part DC plugin, but I could see that being
problematic!
Top

ISA Clients >> Web Proxy / Automatic Configuration (Cross Post)

by ZVR » Tue, 09 May 2006 06:15:43 GMT

> However, even with the DC plug-in SurfControl CANNOT identify individual

NOT true, I'm sorry. if you use authenticated rules IT WORKS. I have done
this several times so far with both Surfcontrol and Websense. Authenticated
rules will yield usernames not IP's, regardless of the state of that
checkbox. And it's only logical if you think about it.

Virgil
Top

ISA Clients >> Web Proxy / Automatic Configuration (Cross Post)

by The Gesus » Fri, 12 May 2006 01:37:04 GMT


That's what I said. Do you have some other point you're trying to make?
Top

ISA Clients >> Web Proxy / Automatic Configuration (Cross Post)

by Phillip Windell » Fri, 12 May 2006 01:43:02 GMT

Actually I thought that wasn't what you said,..and the the checkbox must be
checked.

Phil
Top

ISA Clients >> Web Proxy / Automatic Configuration (Cross Post)

by ZVR » Fri, 12 May 2006 01:50:53 GMT

>> NOT true, I'm sorry. if you use authenticated rules IT WORKS.

Oh, I must have misinterpreted your post then. Scanning through hundreds of
them each day tends to do that to you. Sorry about that.

Virgil
Top

ISA Clients >> Web Proxy / Automatic Configuration (Cross Post)

by andris » Tue, 01 Aug 2006 02:16:34 GMT


Top
Similar Threads

1. web proxy exceptions and automatic web browser configuration by firewall client - ISA Clients

2. automatic proxy configuration script 

Hi, What information contains an automatic proxy configuration script 
(array.dll?Get.Routing.Script)? Does it contain LDT information? Where can I 
find an example of this script?
Thanks

3. Automatic proxy configuration script on XP SP2 - ISA Clients

4. automatic configuration script similar to proxy.pac 

Hi All,

Can you setup an automatic configuration script similar to proxy.pac file? 
This is the file where you can set either go through the proxy servers or 
bypass the proxy server.

I tried to setup the wpad.dat and it did not seem to work and I don't think 
it functions as proxy.pac.

Please advice.

Thanks,

Steve

5. Automatic Proxy Configuration

6. "Disable scheduled send/receive" missing from "Send/Receive settings" - Cross post, kind of 

Office Outlook 2007, SP1

Apologies if this is considered a cross-post. I posted a similar question on
ms.public.outlook, and am not really sure how this outlook.general group
differs... Don't be too mad at me if I shoulda stuck with my Q over there!

There are a lot of online references to being able to find a "Disable
Scheduled Send/Receive" command by going to Tools> Send/Receive>Send/Receive 
Settings. I understand there's supposed to be 3 choices under Send/Receive 
Settings: Define Send/Receive Groups, Show Progress, and Disable Scheduled 
Send/Receive.

I have only the first two choices: Define groups and show progress.

The same three choices should be available under the "Send/Receive" button 
that can be placed on the toolbar, but I get only "define" and "show" -- no 
"disable."

I _know_ how I can disable the auto send/receive by going into the "Define 
send/receve groups," and unchecking the "Schedule automatic send/receive" 
box, but I want the more simple "Disable Scheduled Send/Receive" button. 
Which, incidentally, I used to have but somehow managed to delete when I 
tried moving its location.

Any help would be greatly appreciated!

Thanks.

Ken Isaacson
SILENT COUNSEL, a legal thriller
www.KenIsaacson.com

7. My Doc Redirection/offline files disabling by itself.-cross post - Windows XP