topic Re: Integrated Windows authentication fails through PIX in Network Access Control

Integrated Windows authentication fails through PIX

mikehc — Fri, 21 Feb 2020 18:07:54 GMT

I regularly connect to an external website which uses IIS's Integrated Windows authentication (aka NTLM). When connecting to this site via a modem and dial-up account, IE6 prompts for a username and password. But when using the LAN connection, via a PIX 501, there is no prompt for credentials and the server returns HTTP 401.2 immediately.

Interestingly, if I set up the website to listen on port 8001 (or whatever) as well as 80, then it works fine through the PIX as well as the dial-up.

Can anyone shed any light on this? Thanks.

Re: Integrated Windows authentication fails through PIX

gfullage — Thu, 07 Aug 2003 05:17:21 GMT

Are you doing user authentication on the PIX as well, so that a user has to authenticate to the PIX before being able to send outbound traffic? If so, see the "virtual http" command docs here:

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_62/cmdref/tz.htm#1037665

Re: Integrated Windows authentication fails through PIX

mikehc — Thu, 07 Aug 2003 06:46:16 GMT

No, I'm not doing any authentication on the PIX (as far as I'm aware) - I'm using it pretty much straight out of the box and there are no AAA commands in the configuration.