nw_mr2
asked on
Proxy blocking sites on IE7 (intermittantly) but not IE6...
My domain controllers are running IE6, and our proxy is running a Blue Coat SG800 Series, with SGOS version 3.2.6.1.
Most of our clients are using IE6 as well. Internet access and proxy blocking work great. Only a few have IE7, but the problem is that about 50-70% of those on IE7 block ALL websites with the proxy denied screen.
If I bypass the proxy, it usually works. HOWEVER, we have had times where bypassing the proxy has caused "page cannot be displayed" errors. Also, we've experianced it working fine on the local admin account (still on the domain), but domain user or domain admin accounts almost never work correctly.
What could be causing this? We've looked through the Group Policies as well as the proxy rules and haven't found anything alarming.. Any tips are appreciated.
Most of our clients are using IE6 as well. Internet access and proxy blocking work great. Only a few have IE7, but the problem is that about 50-70% of those on IE7 block ALL websites with the proxy denied screen.
If I bypass the proxy, it usually works. HOWEVER, we have had times where bypassing the proxy has caused "page cannot be displayed" errors. Also, we've experianced it working fine on the local admin account (still on the domain), but domain user or domain admin accounts almost never work correctly.
What could be causing this? We've looked through the Group Policies as well as the proxy rules and haven't found anything alarming.. Any tips are appreciated.
ASKER
Well I gave that a try but now I'm getting a login/authentication window asking for username/password (With the proxy internal ip address listed).
ASKER
Looking at Authentication options on the Bluecoat, there is a NTLM section which has both my DCs listed. Nothing for Kerberos though.
What will happen if I flush the authentication realm cache?
What will happen if I flush the authentication realm cache?
ASKER
Sorry for yet another post (no edit option...) Just found a bunch of these in my proxy event log:
2008-07-14 05:16:07+00:00UTC "Authentication failed from xxx.xxx.xxx.xx: user 'xxxxxxx13355\xxxx(realm network)" 0 260017:96 ..//../AuthUtility.cpp:281
2008-07-14 05:16:07+00:00UTC "Authentication failed from xxx.xxx.xxx.xx: user 'xxxxxxx13355\xxxx(realm network)" 0 260017:96 ..//../AuthUtility.cpp:281
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Disable Kerberos by going to Internet Options, Advanced, uncheck 'Enable Integrated Windows Authentication' and OK/Restart browser.
Firefox works in a similar fashion, you could try installing that on one of your machines and see if it exhibits similar symptoms.