Re: silently authenticate to websense?

From: Leythos (void_at_nowhere.org)
Date: 09/25/04 

Date: Sat, 25 Sep 2004 18:18:24 GMT

In article <3972caa7.0409250817.1f92365a@posting.google.com>,
SLCUUVKKQKKI@spammotel.com says...
> Hi,
>
> We've got a websense filter at my work. It doesn't appear to be a
> proxy (I don't have to set up any proxy server in my browser
> settings), but it does appear to intercept HTTP traffic and put up a
> basic authentication dialog -- then this lasts for a while and at
> seemingly random intervals throughout the day it will ask again. This
> is annoying but tolerable if I'm just using a browser -- I can save
> the username and password and whenever it comes up, just click "OK" to
> send the authentication and move on.
>
> But I think this random reauthentication is messing up some other
> applications, like the streaming audio I listen to via MusicMatch --
> when this auth request comes up again, MusicMatch doesn't know how to
> handle it in the context of a stream, so it just hangs or dies or does
> something else bad and I have to quit the application (sometimes
> forcibly) and restart it.
>
> So before I write one on my own (which I'm tempted to do), does anyone
> know of a good solution like a simple Windows desktop-based personal
> proxy that I could somehow configure to pass (transparently) a
> username/password anytime websense asks for one, and then I could just
> configure all my browsers and local applications to use this local
> proxy? The websense request is recognizable -- instead of the expected
> HTTP response from the server I was *trying* to contact, I'll get a
> response with a basic auth request, coming from the websense server
> (10.x.x.x) -- so I'd just like to find a proxy that can recognize this
> temporary interception, respond to it and continue without any of the
> apps using the proxy from realizing anything happened at all... no
> more authentication requests passed along to the client apps.

You've mentioned the following key items here:

1) You are at work
2) You want to bypass their security methods
3) You listen to streaming audio over the company network

Things you need to know:

1) Ask your IT manager if they permit you to use the company network for
NON-COMPANY/BUSINESS activities - my guess is that they don't.

2) Ask yourself, is it worth loosing your job to bypass their security
measures for your own personal pleasure?

3) Why can't you use a CD player or purchase and use a MP3 player like
others?

4) Proxies don't have to be setup in IE or on your computer, firewalls
can filter traffic through their own proxy services and block access to
configured sites.

5) Listening to streaming audio over the company network is a serious
waste of company resources.

6) Sessions timeout - that could easily be what you are experiencing. 

-- 
--
spamfree999@rrohio.com
(Remove 999 to reply to me)

Relevant Pages

  • Re: [Full-disclosure] Websense Enterprise 6.3.3 Policy Bypass
    ... I wouldn't call breaking proxy chaining mitigation, ... there's nothing at all in the Websense database indicating you went ... Now, as far as stripping out the Via header at ISA goes, per RFC 2616... ... "filtered request." ...
    (Full-Disclosure)
  • Re: [Full-disclosure] Websense Enterprise 6.3.3 Policy Bypass
    ... Websense Enterprise 6.3.3 Policy Bypass ... I wouldn't call breaking proxy chaining mitigation, ... there's nothing at all in the Websense database indicating you went to ... Now, as far as stripping out the Via header at ISA goes, per RFC 2616... ...
    (Full-Disclosure)
  • Re: Websense and Proxies
    ... >> Websense permits you to filter the internet page using a DB. ... >> Websense by setting a proxy address in the internet browser option. ... >> How can we prevent the Administrator profile from being able to do ...
    (comp.security.firewalls)
  • RE: Internet usage and monitoring
    ... At my last job, I setup a squid proxy and since we used Cisco, almost ... Anyway, if you got some chi-ching $$$, I'd highly recommend WebSense. ... Subject: Internet usage and monitoring ...
    (Security-Basics)
  • Re: [Full-disclosure] Websense Enterprise 6.3.3 Policy Bypass
    ... Websense, I'm don't see how that would work. ... Websense Enterprise 6.3.3 Policy Bypass ... 6.3.3/Microsoft ISA Server proxy integration environment. ...
    (Full-Disclosure)