Hello,
ASG220 v8.202
Transparent mode w/AD 2003 SSO
Firefox 10.0, Internet Explorer 8, Google Chrome 16.0
We are experiencing a very strange issue. Certain URLs when accessed under Firefox cause a prompt for Proxy authentication. We enter valid credentials but it rejects them and after a number of retries, locks out the AD account.
An example is - Flying Clusters: A Glance at Real-Time Replication From MySQL To Oracle
Here are the corresponding block lines from the Web Filtering log:
Note: I've manually removed the "srcip" and "user" data
Accessing the same URL under Internet Explorer or Chrome works fine.
Firefox is set to pull proxy settings from the system proxy settings.
I'm not sure what's causing the issue, but we seem to be spending more and more time unlocking peoples AD accounts as seeminlgy random pages are blocked.
Has anyone seen this behaviour before or know what the cause may be?
Many Thanks,
Paul
ASG220 v8.202
Transparent mode w/AD 2003 SSO
Firefox 10.0, Internet Explorer 8, Google Chrome 16.0
We are experiencing a very strange issue. Certain URLs when accessed under Firefox cause a prompt for Proxy authentication. We enter valid credentials but it rejects them and after a number of retries, locks out the AD account.
An example is - Flying Clusters: A Glance at Real-Time Replication From MySQL To Oracle
Here are the corresponding block lines from the Web Filtering log:
Quote:
|
2012:02:03-11:30:42 asg httpproxy[6718]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="" dstip="" user="" statuscode="407" cached="0" profile="REF_gAYWStHmik (Main)" filteraction=" ()" size="5529" request="0xc6dd2d08" url="http://r1rk9np7bpcsfoeekl0khkd2juj27q3o-a-fc-opensocial.googleusercontent.com/gadgets/ifr?url=http://www.google.com/friendconnect/gadgets/members.xml&container=peoplesense&parent=http://flyingclusters.blogspot.com/&mid=0&view=profile&libs=google.blog&d=0.1-72486f89_05a7481a_1fab9641_debf6993_f2911b31.7&lan g=en&communityId=05620763685283819701&caller=http://flyingclusters.blogspot.com/2011/09/glance-at-real-time-replication-from.html" exceptions="" error="" |
Quote:
|
2012:02:03-11:30:42 asg httpproxy[6718]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="" dstip="" user="" statuscode="407" cached="0" profile="REF_gAYWStHmik (Main)" filteraction=" ()" size="5529" request="0xc6dd2d08" url="http://r1rk9np7bpcsfoeekl0khkd2juj27q3o-a-fc-opensocial.googleusercontent.com/gadgets/ifr?url=http://www.google.com/friendconnect/gadgets/members.xml&container=peoplesense&parent=http://flyingclusters.blogspot.com/&mid=0&view=profile&libs=google.blog&d=0.1-72486f89_05a7481a_1fab9641_debf6993_f2911b31.7&lan g=en&communityId=05620763685283819701&caller=http://flyingclusters.blogspot.com/2011/09/glance-at-real-time-replication-from.html" exceptions="" error="" |
Accessing the same URL under Internet Explorer or Chrome works fine.
Firefox is set to pull proxy settings from the system proxy settings.
I'm not sure what's causing the issue, but we seem to be spending more and more time unlocking peoples AD accounts as seeminlgy random pages are blocked.
Has anyone seen this behaviour before or know what the cause may be?
Many Thanks,
Paul