Authentication is a good thing, and it’s one of the main reasons why the ISA firewall is a more secure solution than the typical “hardware” firewall . However, like in other areas in life, there can be too much of a good thing.
That’s the case with the “Require all users to authenticate” option on the “outbound Web requests listener” (OK, that’s hailing back to the ISA 2000 days, but the term is a good one and we should bring it back for ISA 2004/06 and TMG).
Check out Richard Hicks’ blog to see what I’m talking about
http://tmgblog.richardhicks.com/2009/01/26/automatic-detection-fails-for-isa-firewall-clients/
HTH,
Tom
Thomas W Shinder, M.D., MCSE
Sr. Consultant / Technical Writer
Prowess Consulting www.prowessconsulting.com
PROWESS CONSULTING | Microsoft Forefront Security Specialist
Email: [email protected]
MVP — Forefront Edge Security (ISA/TMG/IAG)