Intermittent Authentication Issues with web proxy clients

Hello all:

Im running TMG with 2 nics in my environment.  All of my clients are web proxy clients.  The proxy settings have been setup with group policy in IE on all my machines.  From time to time my end users are getting denied access to the internet because they are not authenticated.  Strange thing is sometimes the issue goes away and sometimes it doesnt.  My internet access rule on TMG requires authentication hence the reason they are blocked.  The only workaround I have found is to put these machines in a specific rule that doesnt require authentication (something I dont want to do).  I have done some network captures using MS Network Monitor when this happens however I cannot make any sense of them.  Im hoping someone here can help me with this issue as its very frustrating. 

Thanks

zack

July 2nd, 2013 11:00am

Hi,

did you checked your configuration with the following article:

http://technet.microsoft.com/en-us/library/bb794787.aspx

Free Windows Admin Tool Kit Click here and download it now
July 2nd, 2013 12:06pm

Marc:

Thanks for your prompt reply. I looked over the article however im not sure if it applies to me here.  In looking through the logs on TMG whenever the issue happens I get this...

Log type: Web Proxy (Forward)
Status: 12209 Forefront TMG requires authorization to fulfill the request. Access to the Web Proxy filter is denied.
Rule: Internet Access
Source: Internal (192.168.1.78:62337)
Destination: External (192.168.1.250:8080)
Request: GET http://lt150.tritondigital.com/lt?guid=VEQ0MX5kNzI3NGNhYS04MjYxLTRhOGYtOGQzNi1lNTNiMDE2ZWZmZjQ%3D&yob=1964&gender=F&zip=60130&hasads=1&devcat=WEB&devtype=WEB&cb=13727723642808733
Filter information: Req ID: 13e4ec86; Compression: client=No, server=No, compress rate=0% decompress rate=0%
Protocol: http
User: anonymous

Im at a loss here as to what the issue may be.  My internet access rule is setup for "All Authenticared Users"  Im using integrated authentication if that helps.

July 2nd, 2013 2:38pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics