Integrated Windows Authentication not working through a Firewall






I am using my laptop to do asp.net development. And it has Zone Labs
Integrity Flex firewall running all the time. (This is a similar
product as Zone Alarm.)

The application is using windows authentication to identify the user and
perform necessary functions. In order to achieve this, the site is
configured to have the following "Directory Security"

- Anonymous access is turned OFF

- Integrated Windows authentication is turned ON (and other
Authenticated access options are OFF)

When I am trying to access a page, an error page "Page Cannot
Displayed" appears. The IIS log shows four trials of the same page
with HTTP 401 error.

I am suspecting that some communication is being blocked by the firewall
that IIS is failing to get authenticated through the domain controller.
I want to get a basic understanding of what processes are involved
behind the scene and which ports are used by them so that I can open up
the firewall to enable these. (I've tried enabling the most things that
I could see that may be involved, but still not working.)

When Anonymous access is turned ON, the application works fine EXCEPT
that I don't get user information.

*** Sent via Developersdex http://www.developersdex.com ***
.



Relevant Pages

  • Re: Anonymous access Vulnerabilities
    ... NTLM vs Anonymous access because we need to have a company standard regarding ... "what method of authentication we need to utilize," and why we want to use it ... > security system), or you can use HTTP based authentication (Kerberos, NTLM, ... > firewall) can not connect. ...
    (microsoft.public.inetserver.iis.security)
  • Re: OWD blocked "Internet Explorer cannot display the webpage"
    ... So, depending on what you have defined in the policies, you may have to undo them, put the computer back on the network and let it get the new policies. ... I'm not entirely convinced that it's Integrated Windows Authentication causing these issues but am option to suggestions. ... Disabling Windows firewall on Vista ... The last thing I was playing with was firewall via group policy, blocking all incoming on the domain network. ...
    (microsoft.public.exchange.clients)
  • Re: Anonymous access Vulnerabilities
    ... It's a site that allows anonymous access. ... own" (e.g. authentication where a user types a username/password into a HTML ... firewall) can not connect. ... allowing "anonymous access" isn't a security risk per se. ...
    (microsoft.public.inetserver.iis.security)
  • Re: Anonymous access Vulnerabilities
    ... firewall and the site is anonymous, then someone from the outside can access ... that site without penetrating the firewall? ... Anonymous access just merely means that the site is wide ... we should just worry about our firewall. ...
    (microsoft.public.inetserver.iis.security)
  • RE: Web Part - firewall authentication
    ... I would have to know more about your firewall to know how to answer this. ... Does your firewall use Windows Authentication? ... Sharepoint impersonates the user that the request is running under, ... > to be displayed to the user, without requiring the user ...
    (microsoft.public.sharepoint.portalserver.development)