Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

Java application

1 view
Skip to first unread message

Mario P. Neto

unread,
May 20, 2010, 2:11:01 PM5/20/10
to
I have three isa server but after configure web authentication to have a
report by usename, some web sites that has Java application inside are
inaccessible.

If i install the Isa server firewall client the java website works fine.

I tried many configuration/rules for this particular web site without success.
that is a way to solve this problem? without use the firewall client.

Thanks,

Mario Paparella


Phillip Windell

unread,
May 20, 2010, 3:17:04 PM5/20/10
to

"Mario P. Neto" <Mario...@discussions.microsoft.com> wrote in message
news:AC0B2EF0-08E0-453B...@microsoft.com...

The Probolem is the Java JRE. Sun Microsystems has never "got it right" in
getting it to properly authenticate to all CERN web proxy servers when those
proxy server require authentication. So you have to diable the proxy
settings in the JRE (tell it to operate "direct") and then install the
Firewall Client as you have done. The FWC then provides the authentication
"transparently" on behalf of the JRE.

So you have two options:

1. Install the Firewall Client

2. Change the access rule to anonymous access.

Windows Media Player used to have exactly the same problem. There are
probably other Apps out there may have the same problem. Adobe products
have problems "activating" through a proxy and almost fail no matter what
you do, my last experience with them I had to move the machine to the
"outside", activate the product, then bring it back to the inside.

You should be running the FWC anyway. Without it you loose 30% of the ISA
abilities. ISA is made up of three Services and each is unique with unique
abilities,..take any of them away and you loose functionality. Machines
should be used as Firewall Clients, Web Proxy Clients and SecureNAT client
all at the same time to get full and proper functionality. Only a few
servers should be run without the FWC and I believe those are Domain
Controlllers and Exchange Servers, although I cannot document that at the
moment.


--
Phillip Windell

The views expressed, are my own and not those of my employer, or Microsoft,
or anyone else associated with me, including my cats.
-----------------------------------------------------


0 new messages