Web Filtering authentication issue with multiple AD domain on same AD forest

Dear all

We are testing an Astaro ASG320 ver 8.301 for a big customer and we are facing the following issue.The customer would like to use Astaro only for web filtering in proxy mode with Active directory group authentication.Astaro ASG is configured with a single Ethernet adapter and only Web Filtering fantionality is enabled. The problem is that the Active Directory Domain of the user is under a Global forest along with several other domains. The customer has created active directory groups containing user of his local domain and astaro is using those group with the Dynamic membership group to authenticate Web Filtering requests. Astaro is joined to the local domain. Customers global policy allows a user to authenticate and use Internet and company network from all over the world. So a user located at country X can authenticate on country Y domain (both domain are under the same forest) and use all company network recourses. The problem with Astaro lies on the fact that when we include the user from domain Y on the groups created on domain X the user can not authenticate on the Astaro.

Please let me know if you have faced such situation and how we can resolve them.

Regards

Antonis Constantinou