Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 4 replies
  • Subscribers 1 subscriber
  • Views 2788 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Web Security Authentication

system-partner
Hi everybody,

I am just trying various features on the Web Security module.
However, I got stuck with an authentication issue. What I would like to do:

Employees should access the web with AD SSO Authentication.
If this authentication fails (i.e. for Guests), there should be a fallback to transparent mode with a very restricted policy (i.e. Only Windows Updates)

On Non-Domain Clients I get a "Authentication Failed" error message.
2010:08:27-12:40:24 astaro httpproxy[22954]: [0xb1a50b00] adir_auth_process_negotiate (auth_adir.c:311) gss_accept_sec_context: An unsupported mechanism was requestedNo error


My Config:
A Proxy Profile with the LAN-Network, a Filter on AD-Users and a Fallback Action for Default Content Filter.
On the Web Security\HTTP(S)\Global Page I configured Transparent Mode

Is my configuration wrong or is it simply not supported?

Thx for reply,
Chris


This thread was automatically locked due to age.
Parents
  • 0
    It seems that the fallback action is not initiated when the authentication fails.

    That would seem to me to be a design flaw in the Astaro.  Can you submit a ticket to Astaro Support?

    If you have guests who aren't logged in to AD, their browser won't grab the wpad.dat, so their laptops should be handled the way you want.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • 0
    It seems that the fallback action is not initiated when the authentication fails.

    That would seem to me to be a design flaw in the Astaro.  Can you submit a ticket to Astaro Support?

    If you have guests who aren't logged in to AD, their browser won't grab the wpad.dat, so their laptops should be handled the way you want.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
No Data