Cisco Secure ACS with Exchange 2000 WEB

[nacarter]

I have Cisco ACS 3.0

Authenticating with no problem using my PIX 515 firewall.

When my remote clients access my internal exchange 2000 server via a browser, they authenticate fine. After a couple of minutes they are forced to reauthenticate with their user name and password.

Of course this is very annoying to my users.

Anyone out there have any ideas?

[gfullage]

What are the uauth timeout settings in the PIX. Read the documentation on the settings of the absolute and inactivity timers for uauth here (http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_62/cmdref/tz.htm#1026093).

You might also want to add the following command

> sysopt uauth allow-http-cache

which tells the PIX to accept cached usernames and passwords from the users browser, that way when the browser resends the authentication details the PIX will accept it and the user doesn't even know what's going on behind the scenes.