WSA: Authentication failed due to proxy update

[jds5]

Hello,

Following our proxy update from 12.0.1 build 334 to 14.5.0 build 537;  it was observed after a few minutes of normal functioning,
we get the code 407.

We notice that the proxy sends authentication requests in a loop via browser popups.

After analysis, we find that the “Enable Trusted Domain Lookup” option is activated by default. apparently it's enabled by default on this version.

My question :
Can you tell us more about this setting?
What does he do exactly?
In order to understand why the authentication only lasted a few minutes after the update

Best Regards,

José

[jds5]

Disabling this option “Enable Trusted Domain Lookup” solves the authentication problem

[jds5]

Do any of you know how the option works for version 14.5.0?

[fw_mon]

this bug can be related: CSCwc76187

Under certain circumstances when trusted domain lookups take longer time to finish or timeout they may affect the availability of authentication.

Conditions: WSA authenticating users through AD-based realm with "Trusted Domain Lookup" checked

Affected version: 14.0.1-053

Fixed in: 15.0.0-322

I think only later releases, after 2023-04-21, are fixed.

[jds5]

Hello,

Do you know if there are any prerequisites to implement this feature? as flow opening, configuration at the AD level

What will this option query when enabled?

BR,