topic Re: PIX http Authentication & Terminal server in Network Access Control

PIX http Authentication & Terminal server

scolombo — Fri, 21 Feb 2020 18:00:12 GMT

Hi ,

I've got a design question.

I've to set up a firewall solution for a company which is using some terminal servers for their users.

What I'm concerned about is how PIX would handle internet connections coming from the same internal IP address ( whose of the terminal server ) .

I need the PIX to askk for authentication for outgoing HTTP connections , but all the user will be seen as coming from the same IP address. I wonder if the PIX would prompt for authentication only at the first user connection.

Also I'd like to know if anyone has set up , and how , the authentication using Microsoft's WIN2000 embedded RADIUS server .

TIA

Re: PIX http Authentication & Terminal server

murabi — Tue, 04 Jun 2002 12:54:09 GMT

The PIX caches authentication information based on source IP address unless you set the timeout value to zero. Doing so, will require your users to re-authenticate constantly. I don’t understand your setup enough to know how all your users will be coming from the same IP address and if so, how the return packets will route to the respective user properly regardless. I would suggest talking to a Cisco SE to propose a solution for you.

Re: PIX http Authentication & Terminal server

scolombo — Tue, 04 Jun 2002 13:08:55 GMT

The users are working on a terminal server. Which means that it all the users share the same server tough the same IP

Re: PIX http Authentication & Terminal server

jcampbell — Thu, 06 Jun 2002 02:03:54 GMT

I hate to say it, but you will probably need to front-end your pix with a proxy server and point your IE app on your terminal servers to the proxy for authentication.