Barracuda Web Filter Agent WMI problem

sorry, I should have included that originally, the DC's are on Windows Server 2008 R2 and functional level of 2008.  Thanks!

I have a Barracuda 410 Web Filter Appliance that is suddenly giving me authentication fits. We have the Barracuda Agent app installed on both of our DC's to pipe domain login/logout info to the Barracuda appliance for user authentication.Recently the Agent app has stopped working and Barracuda support hasn't been any help. We didnt make any changes to the DC's that I believe would cause this t break, other than Windows Updates (shocking!) According to support the app runs a WMI query of:
SELECT * FROM __InstanceCreationEvent WITHIN 1 WHERE TargetInstance ISA 'Win32_NTLogEvent' and TargetInstance.EventCode = '4624'
When I launch WBEMTEST on the DC's and try to run the query manually I get an error of:Number: 0x80041003Facility: WMIDescription: Access deniedI am no WMI expert so I did some googling with that error code but nothing I have...
This topic first appeared in the Spiceworks Community

Similar Messages

  • LDAP  Attributes for Barracuda Web Filter

    I have the following setting on my filter LDAP settings, but it will not bring the groups in correctly.  Can anyone help me figure out what I am doing wrong or what I need to add to get the Barracuda Filter to work with LDAP.

    This past week, the Spiceworks Community talked over dreams jobs gone awry, the difficulty of taking a lunch break when everyone and their mother needs help, and the whimsical problems an IT pro faces in the First World.The community also talked over the times when whimsy gives way to restlessness (and how to give your two weeks' notice), why the computer monitors of the '80s were green, how to reclaim a company iPhone that mysteriously ends up at a pawn shop, and how many ebooks is too many for Microsoft to give out for free.Last but not least, the much talked about cyberattack on the controversial Italian company Hacking Team did more than show the world's dirty laundry – it exposed a zero-day exploit in Adobe Flash.Iwas an IT administrator for one weekCareers– Sure, I said. I'll start tomorrow, I said. After all, it sounded like a...

  • Fastvue Reporter for Barracuda Web Filter Is Now Available!

    Have you ever wondered how you could change the URL for all of your different modules to better your social networking site? Well, in this article, I am going to … Learn More
    Read More

    This past week, the Spiceworks Community talked over dreams jobs gone awry, the difficulty of taking a lunch break when everyone and their mother needs help, and the whimsical problems an IT pro faces in the First World.The community also talked over the times when whimsy gives way to restlessness (and how to give your two weeks' notice), why the computer monitors of the '80s were green, how to reclaim a company iPhone that mysteriously ends up at a pawn shop, and how many ebooks is too many for Microsoft to give out for free.Last but not least, the much talked about cyberattack on the controversial Italian company Hacking Team did more than show the world's dirty laundry – it exposed a zero-day exploit in Adobe Flash.Iwas an IT administrator for one weekCareers– Sure, I said. I'll start tomorrow, I said. After all, it sounded like a...

  • Problem with my company's web filter, Barracuda when I try to access the internet

    I'm having problems accessing the internet on my tour.  Ever since my company put me on their BlackBerry Enterprise Server it appears that when accessing certain web sites the Barracuda web filter comes on.  It's so frustrating... on top of it my company doesn't pay for my phone at all.  Therefore, I do use my BlackBerry for personal as well as business. 
    I spoke with the IT guy and he initially thought it was the Desktop Software I downloaded to my computer, but we have uninstalled it and re-booted my phone and it's still happening.  I called Verizon Wireless and they tell me that it's because I'm on the company's enterprise server and that I am tied to their internet service and that's why I'm getting the Barracuda access denied on certain sites that they have restricted.  I am incredibly frustrated and don't know what to do...  I want to stay on their server because of the push email and the synchronization  for all my contacts and calendar.  Any help is much appreciated...
    Thanks.
    TinaMarie

    mabbas wrote:
    The blackberries are designed to send everything through the corporate network, when using an Enterprise Server.
    Hi and Welcome to the Forums!
    Just to be sure that this is clear -- they are not "designed" as you state...rather, the BES admins can force all Internet traffic through BES (and thereby apply filters) or they can allow it to go direct through the carrier network. The IT Policy placed onto the device at BES activation is in control of how the traffic flows.
    Cheers!
    Occam's Razor nearly always applies when troubleshooting technology issues!
    If anyone has been helpful to you, please show your appreciation by clicking the button inside of their post. Please click here and read, along with the threads to which it links, for helpful information to guide you as you proceed. I always recommend that you treat your BlackBerry like any other computing device, including using a regular backup schedule...click here for an article with instructions.
    Join our BBM Channels
    BSCF General Channel
    PIN: C0001B7B4   Display/Scan Bar Code
    Knowledge Base Updates
    PIN: C0005A9AA   Display/Scan Bar Code

  • How to get user 'logged in' to ironport web filter without launching IE

    We have an issue with some employees who use third party programs that traverse the Internet.  These programs are 100% allowed by the organization as they are required for day to day business.  Some programs go over the Internet to communicate for certain reasons, such as a live chat help support, or ordering products, etc..
    The problem is that some of these users log in and never even touch Internet Explorer for awhile.  They will go on and start working right away.  Well if they don't try to access an Internet site via IE, then the Ironport does not 'log them in', and they are known as unauthenticated.  Of course this doesn't happen with everyone.  There's nothing wrong with people coming in a little early and checking the local news online.
    We were thinking up if it's possible to have each user 'touch' the ironport web filter in some way during a logon script, unbeknown to the end user, so that they are 'signed in' and whatever Internet connected application they launch has access through to the Internet.  Right now they need to at least launch IE and go to some site (say Google or MSN) and via NTLM credentials transparently passed through IE7, 8 or 9, they can simply close the page and go about their business.  Note: they MUST go to an external site.... not an internally hosted one (such as our Intranet, time clock or HR self service pages).
    So is there any commands we can put in via kix or bat or something that will say "Hey Ironport, %username% just logged in at 10.x.x.x".  Then maybe to make it more advanced, a logoff script that says "Hey Ironport, %username% just logged OFF of 10.x.x.x".  This way when our hourly timeout happens, they aren't immediately booted from their Internet applications (if they don't keep an IE window open that is).
    Right now our ASA Firewall uses WCCP to forward port 80 to the ironport web filter.  The Ironport is a transparent proxy.
    Thanks!

    So it looks like you are moving the authentication from the Ironport S160 to the ASA5500 series firewall?
    I guess we are looking at something simpler, like a way to 'touch' the internet and pass NTLM credentials, because then the Ironport knows who the user is.
    If the user does not 'touch' the internet with IE, and say they use some other program that does not pass NTLM credentials (say Firefox or live chat program, or an ftp program, etc...) They are likely to be blocked, because the Ironport doesn't know who they are.
    Your link seems to lead to a complicated setup for something that seems so simple.  I'm not sure how that relates to an Ironport S160.. it seems to focus on the ASA5500. Also we want it to be completely 100% transparent to the end user.
    This is how it worked with a Barracuda web filter appliance...
    A DCAgent program sat on each domain controller. As users logged in or out of the domain, this agent passed this current activity to the Barracuda web filter appliance.
    The Barracuda appliance knew exactly who was logged in because of this little program on the domain controller(s) that kept it updated. Based on this, policies could be assigned based on Active Directory group memberships. ie) HR and Marketing can access Facebook, while others cannot.
    I guess I'm looking for similar functionality with the Ironport S160. If there's any way the domain controller, or even the client PC can say "Hey Ironport, %username% is logged on here at %ip_address%". That way the Ironport would know who they are, and there would be no unnecessary authentication boxes (besides the user logging into the windows domain). They could use internet connected apps that do not pass NTLM authentication. I guess the client PC or the domain controller would also have to tell the IronPort when they signed off, just so we don't have to deal with authentication timeouts. This way, say they are in our internet chat help program... after an hour, it will cut out and disconnect them - because the IronPort forgets who they are (unless they are actively using the internet with IE).
    So for now, we just use the bypass option for the affected internet services.  The default browser is IE, so the reality is that we are not suffering any tremendous inconvienence.  It's just that we want to ensure we have the best robust solution, and we can handle these types of situations with programs other than IE accessing internet resources.

  • Best Web Filter and Application control for K-12 School using Chromebooks

    Sophos UTM has good education pricing and provides all this and a lot more
    Wil replace the firewall and has excellent web filtering and application control
    Also nice features for education like allowing google apps but limiting to your google domain

    We are currently using Barracuda Web Filter (410) with a Watchguard firewall. This school year we are launching Google for Education with 160 Chromebooks to start the program.
    We need to upgrade our webfilter and are considering another Barracuda as well as Litespeed, Websense and perhaps OpenDNS. 
    is there anyone who is in a similar situation that has some recommendation?
    Here are a few more details:
    School is 900+ students
    300 wired workstations
    Active directory environment
    Ruckus Wireless with 30+ access points
    This topic first appeared in the Spiceworks Community

  • Barracuda spam filter not downloading mail to xserve - smtp problem?

    Hi-
    We just had to upgrade from 10.3 to 10.5 last week (a nightmare that seems to be continuing). We seem to be up and running but there is a weeks accumulation of mail on our barracuda spam filter thzt is not coming through plus any new e-amil from outside the network. Mail seems to be working okay from within the doman. I did a serveradmin check on mail and it is running. In looking through other posts I tried to telnet into the smtp port. I get a timeout when I try to connect from another machine. When I try through localhost I get:
    sh-3.2# telnet localhost smtp
    Trying ::1...
    telnet: connect to address ::1: Connection refused
    Trying ::1...
    telnet: connect to address ::1: Can't assign requested address
    Trying ::1...
    telnet: connect to address ::1: Connection refused
    Trying ::1...
    telnet: connect to address ::1: Can't assign requested address
    Trying 127.0.0.1...
    Connected to localhost.
    Escape character is '^]'.
    220 xserve.testeq.com ESMTP Postfix
    quit
    221 2.0.0 Bye
    The mail.log file does show that the Barracuda is connecting but possibly intermitently?
    Of course there could be another problem involved but does anyone have an idea of what may be happening?
    Thanks,
    Alan Husby
    Test Equipment Corporation
    Any ideas as to why this should be happening?

    Okay - I found a problem with /private/anvil, added anvil line to master.cf and then ran the /etc/postfix/post-install script - Are there any other post install scripts that no one saw fit to put in the documentation that need to run?
    I can now connect to the smtp port from another machine. I still get the above errors when I connect to localhost (but it does connect, I forgot to mention above). Still no sign of the weeks worth of mail backed up on the barracuda...

  • After ios5 upgrade cant get out to the internet via wireless, it wont  get past our Smart Filter (web filter)

    I just upgraded my 3GS to IOS5, and now at work when i am connected to our WiFi I can no longer get out to the internet.
    A little back story on how it worked prior to ios5:
    I would connect via wireless, and then load Safari and type in a webpage I wanted to go to.  A pop up box would come up, to authenticate me on our Web filter server (Running Smartfilter), I woudl enter my regular Active Directory username and Password and boom, i could then surf to my hearts content.
    After the upgrade, I connect to the wireless, load Safari, type in the webpage i want to go to, and the progress bar moves abotu 3mm and then stops, I never get the smart filter prompt.
    I have tried a full reset on the phone, forget network, reset all network settings, I even tried putting in the IP address of the smart filter box as a proxy and still it doesnt work.  I have gone to smartfilters website to see if anyone else has posted there, or if there was a clue as to why it doesnt work, but nothing so far.
    anyone else having this problem? any ideas?
    If it wasnt broken, why would apple mess with it!  a LOT of companies run smartfilter as well as other web filters.  I thought apple was trying to seduce corporate customers, and so far a lot of poeple are dissapointed that they cant get to the internet.
    tha
    nks in advance for any assistance.
    j

    I am having the same problem.  The issue also occurs with Safari on Mac OS 10.7.  I work for a school and I am sure that other schools are using smartfilter too.

  • Web Filter Recommendations

    Hi All,I have a couple of computers that are in need of some kind of web filtering. They run 24/7 and are out in the boonies somewhere where the nights are long and boring. Thus the night shift likes to surf the web to pass the time. This is causing issues, such as a crypto locker variant that has now rendered one of the machines useless. This is costing money as operating out there without a computer causes major production problems. To that end, I am looking for a web filter that I can use on these machines that wont necessarily require a huge amount of trial and testing, talking to sales people, getting quotes, etc. While an enterprise solution would be nice, for now I just need to put something on these 2 machines, quickly and relatively inexpensively that will allow me to block traffic to all web sites except those deemed...
    This topic first appeared in the Spiceworks Community

    Josh,
    I have 10,000 wireless devices. I call BS. You are right some vendor / dept yelled loud enough .. I feel for you.. It will be a up hill battle.
    I would do this . Create a standard that will get most devices to conform to. Some older medical devices wont be able to do AES. So you may be stuck with a WPA/TKIP security.
    Good luck .. hit me up on my blog my80211.com if you have specific questions. Ill see what I can do to help .. We likely run the same equipment and apps and have good relationships with some of the vendors.
    "Satisfaction does not come from knowing the solution, it comes from knowing why." - Rosalind Franklin
    ‎"I'm in a serious relationship with my Wi-Fi. You could say we have a connection."

  • Downloading through a web filter..

    I want to download iOS5 through a Sophos web filter but it times out with error 3259. What URL can I use to whitelist downloading from Apple?

    I have a similar problem. When I'm logged into my company's online bank, I sometimes need to e-mail some account transcripts, but the Adobe reader pop up a box, and telling it's been a fatal error, and need to be shut down. I couls easily do that before, but suddenly it don't work. What is the problem with this program? It really sucks!!

  • Does the 2.1 web policy agent for Windows 2003 work on a 64 bit OS ?

    Does the 2.1 web policy agent for Windows 2003 work on a 64 bit OS ?
    I have a customer having a world of issues getting the agent to start.
    Jeff Courtade

    No. 64bit support is not there for 2.1 agents on Windows.
    -Subba

  • Agent determination problem

    I have a workflow that has been in production for almost a year.  We are in the middle of integration testing for another rollout and I'm getting agent determination errors in this workflow.  There are three steps involved.  The first two use the exact same rule.  The first of these two works fine.  When it tries to run the rule again for the second step, it gets no agent found.  If I test the rule it works.  If I restart the workflow, it works.  When it moves on to the third work item using a different rule, it errors out no agent found.  When I test this rule, it works.  When I restart at this step, it also works.
    This is a new integration client that was copied from production.  I've performed the standard workflow customization like I always do.  I've run several other workflows and only notice the agent determination problems in this one.  The workflow hasn't changed in months although there have been some user security changes...I'm not sure how that could really affect the agent determination during the creation of work items. 
    One thing that might be important...userA created the first workitem and the agent determination resolves to userB.  When userB executes the first work item and completes, the second work item should also resolve to userB using the exact same rule.  This fails.  I restarted it using my account and it resolves to userB.  UserB executes work item #2 and work item #3 should resolve to userC but the agent determation fails again.  I don't know whether the work item agent is "used" to perform the creation of the next workitem or not but this is the only difference between the first two work items and one works while the other does not.
    It's almost like userA can perform the agent determination but userB cannot.  I can't manually execute the agent determination as userB so I ran se37 as myself in debug and changed SYST-UNAME to userB and it worked fine and returned userB as the agent.  That would seem to eliminate security as an issue with the agent determination.

    Hi,
    Are you absolutely sure that it is not an authorisation issue? Can you give SAP_ALL (and the possible structural authorisations) to all the users that are involved in the process? (I don't think that changing sy-uname in debug mode to another user really is a correct way to try to prove whether this is an authorisation issue.)
    The agent determination of the following step is executed by the previous WF agent, if there is no background steps between. So if the previous agent doesn't have enought authorisations, the agent determination will fail.
    Regards,
    Karri

  • How to display the bw-variables in webi Filter

    Hi,everyone,
         When I  set default values ( ex. last month ) to BW-variables in the BW enhanmance, this default valuse can not display in webi. I use the routing: BW-QUERY --> Universe --> webi. So I hope to display the BW-variable in the Webi filter, with which ,I can set the default values . Could you help me?

    Thanks for your help again. I create the universe after had coded  the enhanmance of BW variables.  The engine type universe connection is SAP Business Warehouse.
    So I can see the variables when run the webi query or run the webi but not showing the default value. But the default value effect if I do not set value in prompt.

  • Agent unreachable problem

    One of the monitored SuSE Linux host in my Grid OEM has status "Agent unreachable". As such the host has not been monitored. It was ok before and I am not sure why (and from when) it has the problem. I have checked and the dbsnmp agent on the Linux host is up and running. I have restarted the agent but it does not help.
    Below is the output from "emctl status agent" command issued on the Linux host.
    What do I need to check and try?
    Many thanks.
    Checking Agent status, please wait...
    The Oracle base for ORACLE_HOME=/opt/app/oracle/product/agent/agent11g is /opt/app/oracle
    Oracle Enterprise Manager 11g Release 1 Grid Control 11.1.0.1.0
    Copyright (c) 1996, 2010 Oracle Corporation. All rights reserved.
    Agent Version : 11.1.0.1.0
    OMS Version : 10.2.0.5.0
    Protocol Version : 10.2.0.5.0
    Agent Home : /opt/app/oracle/product/agent/agent11g
    Agent binaries : /opt/app/oracle/product/agent/agent11g
    Agent Process ID : 4684
    Parent Process ID : 4572
    Agent URL : https://romulus.it.csiro.au:3872/emd/main/
    Repository URL : https://oraserv.it.csiro.au:1159/em/upload
    Started at : 2011-01-26 20:22:05
    Started by user : oracle
    Last Reload : 2011-01-26 20:22:05
    Last successful upload : (none)
    Last attempted upload : (none)
    Total Megabytes of XML files uploaded so far : 0.00
    Number of XML files pending upload : 2
    Size of XML files pending upload(MB) : 0.29
    Available disk space on upload filesystem : 1.97%
    Last successful heartbeat to OMS : 2011-01-26 20:22:25
    Agent is Running and Ready

    I issued the "emctl upload agent" command and got some error message about not enough space. I noticed that the /opt/app file was 99% full (it still had few GB free), and I did some clean up and got it down to 93% full (120 GB free now). I then issued "emctl upload agent" again and it gev the output
    Oracle Enterprise Manager 11g Release 1 Grid Control 11.1.0.1.0
    Copyright (c) 1996, 2010 Oracle Corporation. All rights reserved.
    EMD upload completed successfully
    I then checked my Grid Control OEM and the agent unreachable problem is no longer there. :-)
    I will check the log files under sysman/log to investigate the original problem further.
    Many thanks for your help.
    Cheers.

  • What is a web filter and why is it prevetning me from using firefox?

    Firefox allows me to search on google but as soon as i click the next link/to go on the page i want is doesnt work. Instead it talks about a web filter saying that the page i tried to visit could not be checked by web filter. This also happens when i use internet explorer. How do i fix this?

    A web filter can be a piece of software installed on your computer, or on a network you are connected to that checks the content of the sites you are trying to visit. Talk to the owner of the network you are trying use, or the owner of the computer.
    It's also possible you have malware, try scanning for malware with the directions at [[Troubleshoot Firefox issues caused by malware]]

Maybe you are looking for