Ironport Redirect Hostname usage

[valuelabs]

Hi ,

I'm wondering what is the use of the redirect hostname setting on Ironport WSA 370, under network -> Authentication

Transperent proxy authentication mode setting->redirect hostname.

1. Please help me to understand the importance of this

2. If we changes is there any performace or service unavailability problem

Thanks in Advance

Regards

San

[edadios]

When a client is redirected by the WSA for authentication, this hostname is included in the redirect url.

This hostname has to be resolvable to the ip address of the interface of the WSA, so the client pc, will be able to go to the interface url, and provide the authenticaiton credential replies.

Further information on the on line help on the top right hand side of the GUI, look for redirect hostname, under the global authentication settings sections.

Regards,

Eric

[valuelabs]

Hi Eric,

on Ironport there are 2 interfaces configured Managment and Data traffic.

To which IP address, redirect hostname should resolve?

We are also using a Ironport  management M670 also.

At present the redirecthostname is configured hostname is not working but users are able to authenticate

Could you clarify these also.

[edadios]

Hello,

The redirect interface should be the data interface name.

For authentication, if you are configured explicitly (browser points to proxy) then this is not an issue.

It will be an issue if you are doing tranparent (WCCP/PBR), as the WSA will redirect your request, and include the hostname configured in the url redirect.

It will also be in play, if you do EUNs.

I hope that further answers your query.

Regards,

Eric

[valuelabs]

Hi Eric,

Thanks for clearing my questions.

Is there any document on this, please share.

Regards,

Santhosh

[valuelabs]

Hi Eric,

So, Can i change the redirect hostname to the WSA Datainterface hostname?

Thanks,

Santhosh

[edadios · Accepted solution]

Hello Santosh,

Here is some document that adresses your query. Check the infomration on the lower part of the document.

http://tinyurl.com/2n2ykh

The redirect hostname, should be the data interface.

I hope this answers yoru query.

Regards,

Eric