Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 5 replies
  • Subscribers 1 subscriber
  • Views 3587 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Proxy authorization prompt only for certain URLs when using Firefox

psmithne
Hello,

ASG220 v8.202
Transparent mode w/AD 2003 SSO
Firefox 10.0, Internet Explorer 8, Google Chrome 16.0

We are experiencing a very strange issue.  Certain URLs when accessed under Firefox cause a prompt for Proxy authentication.  We enter valid credentials but it rejects them and after a number of retries, locks out the AD account.

An example is - Flying Clusters: A Glance at Real-Time Replication From MySQL To Oracle

Here are the corresponding block lines from the Web Filtering log:

2012:02:03-11:30:42 asg httpproxy[6718]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="" dstip="" user="" statuscode="407" cached="0" profile="REF_gAYWStHmik (Main)" filteraction=" ()" size="5529" request="0xc6dd2d08" url="r1rk9np7bpcsfoeekl0khkd2juj27q3o-a-fc-opensocial.googleusercontent.com/.../ifr


2012:02:03-11:30:42 asg httpproxy[6718]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="" dstip="" user="" statuscode="407" cached="0" profile="REF_gAYWStHmik (Main)" filteraction=" ()" size="5529" request="0xc6dd2d08" url="r1rk9np7bpcsfoeekl0khkd2juj27q3o-a-fc-opensocial.googleusercontent.com/.../ifr


Note: I've manually removed the "srcip" and "user" data

Accessing the same URL under Internet Explorer or Chrome works fine.

Firefox is set to pull proxy settings from the system proxy settings.

I'm not sure what's causing the issue, but we seem to be spending more and more time unlocking peoples AD accounts as seeminlgy random pages are blocked.

Has anyone seen this behaviour before or know what the cause may be?

Many Thanks,

Paul


This thread was automatically locked due to age.
Parents
  • 0
    statuscode="407" - isn't that a problem between Firefox and Google?  If the same client accesses directly, instead of through the proxy, is there an authentication request?

    Cheers - Bob
    PS You might want to edit your post to indicate whether you're truly using Standard with AD-SSO or some transparent mode.
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson
    Hello BAlfson,

    I've attached a screenshot of my Global Web Filtering Settings and my Proxy Profile





    There is no proxy authorization request when I use the same client to access the site directly. Everything works fine.
Reply
  • 0 in reply to BAlfson
    Hello BAlfson,

    I've attached a screenshot of my Global Web Filtering Settings and my Proxy Profile





    There is no proxy authorization request when I use the same client to access the site directly. Everything works fine.
Children
No Data
Cookie Information Banner