Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 8 replies
  • Subscribers 1 subscriber
  • Views 6133 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Web Proxy asking for credentials

ntoupin
Hi,
We have AD SSO turned on for http proxy and it has been working fine.  I do believe we have everything configured correctly as we've been using it for a couple months with the filters working correctly etc.

From time to time a user or a few at a time will receive a pop up coming from the firewall prompting them for their credentials when browsing to a website or using another http method to get through the proxy.  It's not a huge issue just annoying here and there as it continually pops up typically until they reboot the machine.   

I have this happening in two locations on two firewalls (same domain) and a similar network to ours that has 4 firewalls in 4 buildings who are having the same issue.

(Model: ASG320, V 8.305-8.306)


This thread was automatically locked due to age.
Parents
  • 0
    I'm not seeing this anywhere.  I wonder if maybe there isn't a networking issue that causes enough latency for the authentication to fail for the Proxy.  Does anyone know if there's a timeout of some sort that can be adjusted from the command line?

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson
    I'm not seeing this anywhere.  I wonder if maybe there isn't a networking issue that causes enough latency for the authentication to fail for the Proxy.  Does anyone know if there's a timeout of some sort that can be adjusted from the command line?

    Cheers - Bob


    I would be very skeptical if it was something "local" to our network seeing as it's happening at another school district in other towns in 5 other buildings with their own ASGs.  If there is a timeout setting to change for the proxy authentication that would be something I'd definitely be interested in willing to try, it very well could be possible that a connection isn't authenticating "in time" for the proxy on the ASG.
  • 0 in reply to ntoupin
    You should start an official support case with Sophos, sounds like you have commerically licensed units -- that would probably be the quickest path to resolution.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

Reply
  • 0 in reply to ntoupin
    You should start an official support case with Sophos, sounds like you have commerically licensed units -- that would probably be the quickest path to resolution.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

Children
No Data
Cookie Information Banner