Hello All,
I am setting up a Transparent proxy using Cisco CWS and an ISR. (Cisco 3925 with version 15.4-3.M3)
I have it mostly functional however the issue that I'm having now is that the transparent NTLM functionality doesn't appear to be working. When I go to a web page after clearing the ip admission cache I get prompted for a username and password when I use Chrome or IE (I know Firefox doesn't support transparent NTLM).
The LDAP authentication appears to be working fine as it accepts the username and password provided and correctly passes along this information to the CWS towers. I have also verified that there is a DNS entry that resolves the hostname that we are using "proxy-auth" to 1.1.1.1.
Can anyone suggest any troubleshooting steps or commands that I may have missed? Everything appears to be working fine except for the client passing the credentials transparently.
ip auth-proxy watch-list enable
ip auth-proxy watch-list expiry-time 5
ip admission virtual-ip 1.1.1.1 virtual-host proxy-auth
ip admission watch-list enable
ip admission watch-list expiry-time 5
ip admission name WEBAUTH ntlm inactivity-time 30 absolute-timer 240 list CWS-AUTH-LOCAL-BYPASS
ip admission name WEBAUTH method-list authentication PROXY-AUTH authorization PROXY-AUTH
