Enable Read authentication from child proxy

[Ceez]

HI,

How to enable "Read authentication from child/downstream proxy" on Ironport WSA 11.8?

[Ceez]

I currently use two proxies
One is the Web Content gateway ( Forcepoint ), which transparently directs traffic to ironport.
Forcepoint authorizes users using NTLM and Kerberos and sends it to the parent proxy that is Ironport.
I don't know how to set up ironicport to be able to read this information. It ends with a message all the time
407 / Proxy Authentication Required

[Ceez]

or how to enable "Send authentication to parent proxy"? then it will change the proxy order.

[Ken Stieers]

What ip does the WSA see requests coming from? If its the Forcepoint box youre out of luck.


If the forcepoint box sends the request as if it came from the workstation you might be able to use CDA or ISE-PIC to send passive auth to the WSA and get names in reports/logs