CE-505 w/Microsoft Proxy Server Authentication

Recently installed Cisco CE-505 and the customer wants to direct everything to Microsoft Proxy Server for authentication and URL filtering with SurfControl. I added the command: http proxy outgoing host 192.168.90.2 80 primary - which directs all HTTP requests to the Proxy Server; however, the proxy server requests a login. Is there a way to pass either a plain text username and password or how to pass the original login information to the Proxy Server. The only way I know how to get around the problem is to policy route the traffic to the inside interface of the Proxy Server.
Thanks,
Brian

Since there has been no response to your post, it appears to be either too complex or too rare an issue for other forum members to assist you. If you don't get a suitable response to your post, you may wish to review our resources at the online Technical Assistance Center (http://www.cisco.com/tac) or speak with a TAC engineer. You can open a TAC case online at http://www.cisco.com/tac/caseopen
If anyone else in the forum has some advice, please reply to this thread.
Thank you for posting.

Similar Messages

Help Proxy Server Authentication

Hi All,
We are making a J2ME application, and trying to get thru the proxy server which requires authentication.
Here is my code but it is getting hang in between.
Can anyone helps me out:
HttpConnection c = (HttpConnection)Connector.open(url);
c.setRequestMethod(HttpConnection.GET);
String password = "username : password";
base=new Base64Encoder();
String encodedPassword = base.encode(password);
c.setRequestProperty( "Proxy-Authorization", "Basic" +encodedPassword );
c.setRequestProperty("User-Agent", "Profile/MIDP-1.0 Confirguration/CLDC-1.0");
c.setRequestProperty("Content-Language", "en-CA");
is = c.openDataInputStream(); //IT HANGS HERE AND THROWS A IOEXCEPTION
len = c.getLength();
if( len != -1)
// Read exactly Content-Length bytes
for(int i =0 ; i < len ; i++ )
System.out.println("4");
if((ch = is.read()) != -1)
System.out.println("5");
b.append((char) ch);
else
//Read until the connection is closed.
while ((ch = is.read()) != -1)
len = is.available() ;
b.append((char)ch);
Can anyone help..
any help will be great..
thanks,

You can try setting the System properties http.proxyUser and http.proxyPassword
System.setProperty("http.proxyUser", "myusername")
System.setProperty("http.proxyPassword", "mypassword")Or if that doesn't work, you can subclass the java.net.Authenticator class and override its getPasswordAuthentication method.
public class ProxyAuthenticator extends java.net.Authenticator {
public PasswordAuthentication getPasswordAuthentication() {
new PasswordAuthentication("myusername", "mypassword".getChars());
}

Microsoft proxy server keepalive

We are balancing 5 microsoft proxy servers. The keepalive we are using is a TCP 8080. We have seen occasions where the proxy will respond to an 8080 syn packet but the proxy service is down. Is there a better keepalive to use for load balancing a ms proxy server?

tcp is fine.
Also to go down you need to miss 3 retries in a row by default. So it makes even more suspect.
We should investigate why it was reported down even if the proxy responded.
What type of CSS ?
What software version ?
What keepalive frequency ?
What keepalive retries ?
How often do you see the problem ?
Does the service come back up immediately after ?
Sniffer trace available ?
Thanks,
Gilles.

Microsoft Terminal Server needs Cisco layer of authentication

We are running Microsoft terminal services. We connect to our main office using the Microsoft remote desktop client. We insert the fixed public IP address of our server in the remote desktop client. That remote desktop client then connects to terminal services and the user is queried for a user name and password. We would like to add a Cisco solution that would put an additional query for a Cisco device authenticated username and password before the Microsoft Terminal Server authentication box for user name and passwords appears...Seeking guidance on which Cisco hardware we could purchase for this purchase and what feature of that purchase would be configured to allow for accomplishment of security goal.
thankyou.

Lew: I suggest you post same question in Microsoft Forums.
I am not fully aware how microsoft server will query cisco auth server (ACS for example). But in microsoft forums they might be able to help better.
If they reply with something please share it with us here for general knowledge.
Regards,
Amjad
Rating useful replies is more useful than saying "Thank you"

Proxy server with user/password

Hello,
I'm trying to use Jdev behind a firewall with ip + port + USERNAME + PASSWORD
How configure Jdev to work with this firewall
Option Preference Proxy does not give the choice of login/password preference...
Is there a config file where I can set my preferences?
Thank you

It is possible to configure the proxy host, port and exclude list via system properties, but not the authentication information.
To implement proxy authentication, you must add code to each place in your application where you use a URLConnection. In response to a status 407 response (Proxy Authentication Required), you must resend the request with a Proxy-Authorization header.
This is not trivial, since the content of the Proxy-Authorization header is dependent on the authentication scheme being used by the proxy. There are a number of different authentication schemes used by popular proxy servers. For instance, many people use a Microsoft proxy server which uses a proprietary authentication encoding mechanism known as NTLM to support authentication using Windows domain username / password combinations.
Anyway, this is why it's pretty hard to support username/password proxy authentication in Java applications, and hence why it's frequently not supported in apps like JDeveloper. Support for this is logged as an enhancement request, and we will eventually implement a solution.
Thanks,
Brian

Configuring the application server to use HTTP proxy server

Hi,
I am trying to configure LiveCycle ES2 to access services over the internet and since my Livecycle server connects to internet through a Proxy server, I have referred to section 5.8.2 of LiveCycle install_weblogic.pdf that states the following:
If the computer that LiveCycle ES2 is running on uses proxy settings to access external web sites, the
application server should be started with the following values set as Java virtual machine (JVM)
arguments:
-Dhttp.proxyHost= [server host]
-Dhttp.proxyPort= [server port]
However, I am getting the below exception while running the LC application as my Proxy server requires User credentials to connect to the internet:
weblogic.net.http.HttpUnauthorizedException: Proxy or Server Authentication Required.
I tried providing the below JVM startup argument too, but no luck:
-Dhttp.proxyUser= [proxy user]
-DhttpPassword= [Proxy password]
Can you please suggest how to configure User credentials for the Proxy server in Livecycle.
Thanks in advance.

Hi WASIL,
Thank you for your response.
I have followed the above document suggested by yourself and the relevant steps while setting up the Server and the Workbench, and verified the settings too.
The installation guide does highlight the steps to configure a Proxy server. However, the guide does not mention anything about how to handle Proxy server authentication.
Please note that there are Proxy authenication options available in Workbench to configure how the Workbench connects to the LiveCycle server, whereas the problem I am facing here is how to connect the LiveCycle server with internet services through a Proxy server.
I hope that clears the problem statement.
Thankyou for your assistance.

Configuring a proxy server with username and passw...

Dear All,
There is one thing which I have found in all the Nokia phones I have had until now which I find very disappointing:
A proxy server can be set BUT a username and password for it cannot.
In the case of trying to connect to the Internet outside a corporate network normally a proxy connection with username and password has to be entered.
I can enter the proxy server on my Nokia phone but there is no place to enter a username and password in order to authenticate in front of the proxy server.
Does Nokia think about adding this functionality, which, if I may say, has been in Windows Mobile since quite some time.
If not for all phones, at least for the E series which are intended to be used in secure business networks.
In the current situation I can use the corporate Wi-Fi to check my Exchange email which is great, but when I need to access something outside the corporate network I have to use the 3G network.
So two question arise from the above:
1. Will Nokia at some point implement Proxy Server Authentication? (Or maybe I'm not able to find it)
2. Is there any application which allows Proxy Server Authentication to be used when connecting to the Internet?
Thank you in advance for your help!
Mitko
Nokia 650, Nokia 3510i, Nokia 3650, Nokia 6680, Nokia N73, Nokia E51, Nokia 5800 XM, HTC Desire, HTC Trophy, Nokia Lumia 820

Hi,
You can do:
username:password@proxyservername
Andy

Use of CE/WCCP with Microsoft ISA server acting as an authentication proxy.

We have a design where all web users are authenticated against Active Directory by Microsofts ISA server proxy service prior to accessing web resources.
Is it possible to implement a CE behind the ISA server, and still have the proxy authenticate users credentials?
My concern is that WCCP will redirect traffic to the content engine first, if the content is not available, wil the content engine then forward to the proxy for authentication prior to the request going out to the web?
Cheers,

Since there has been no response to your post, it appears to be either too complex or too rare an issue for other forum members to assist you. If you don't get a suitable response to your post, you may wish to review our resources at the online Technical Assistance Center (http://www.cisco.com/tac) or speak with a TAC engineer. You can open a TAC case online at http://www.cisco.com/tac/caseopen
If anyone else in the forum has some advice, please reply to this thread.
Thank you for posting.

Connecting to DirectAccess server from a client behind proxy with authentication

Hi,
All our DA clients are working fine except those that are working from a client company where a proxy with authentication is used.
Our DA server is running Windows server 2012 and clients are running Windows 7.
I have found similar posts, where it states it is a known issue and it is fixed by a new feature in Windows 2012, however i cannot find more info:
http://technet.microsoft.com/en-us/library/hh831416.aspx
IP-HTTPS runs in a system context rather than a user context. This context can cause connection issues. For example, if a DirectAccess
client computer is located in the network of a partner company that uses a proxy for Internet access, and WPAD auto detection is not used, the user must manually configure proxy settings in order to access the Internet. These settings are configured in Internet
Explorer on a per user basis, and cannot be retrieved in an intuitive way on behalf of IP-HTTPS. In addition, if the proxy requires authentication, the client provides credentials for Internet access, but IP-HTTPS will not provide the credentials required
to authenticate to DirectAccess. In Windows Server 2012, a new feature solves these issues. Specifically, the user can configure IP-HTTPS to work when behind a proxy that is not configured using WPAD and IP-HTTPS will request and provide the proxy credentials
needed to IP-HTTPS request authenticated, and relay it to the DirectAccess server.

Hello,
As far as I know it's a feature of Windows 2012 URA with a Windows 8 client.
Unfortunatelly you will have trouble with proxy authentication with Windows 7 client I think
Regards,
Follow me on Twitter http://www.twitter.com/liontux | My Blog (French/English) :
http://security.sakuranohana.fr/

Authenticating via Microsoft ISA Server using Integrated protocol

*** Cross-posted in Advanced Language Topics forum ***
Does anyone know how to configure a URLConnection object to authenticate via a Microsoft ISA Server using the Integrated protocol?
Authenticating using the Basic protocol is easy:
URLConnection conn = <whatever>;
String username = <whatever>;
String password = <whatever>;
String auth = username + ":" + password;
String encodedAuth = new BASE64Encoder().encode(auth.getBytes());
conn.setRequestProperty("Proxy-Authorization", "Basic " + encodedAuth);Does anyone know what to change to authenticate with the Integrated protocol?
Thanks,
Shaun

Just visiting...
Shaun

HttpUnauthorizedException: Proxy or Server Authentication Required

Hi,
the exception we had from weblogic_10.3.5 to successfully pass internet proxy authentication seems not working.
here you go,
http://soadev.blogspot.in/2010/02/setting-proxy-authentication-in-java.html
and still the same exception occurs, any ideas ?

i m not using any specific proxy server it's our official internal proxy.
I alreadt tried with below, set those in "C:\bea\user_projects\domains\MHCIR\bin\setDomainEnv.cmd" but still getting same error.
set JAVA_OPTIONS=%JAVA_OPTIONS% -Dhttp.proxyHost=172.18.18.18
set JAVA_OPTIONS=%JAVA_OPTIONS% -Dhttp.proxyPort=8080
set JAVA_OPTIONS=%JAVA_OPTIONS% -Dhttp.proxyUser=INDIA\336292
set JAVA_OPTIONS=%JAVA_OPTIONS% -Dhttp.proxyPassword=Kolkata@491
set JAVA_OPTIONS=%JAVA_OPTIONS% -Dweblogic.webservice.transport.http.proxy.host=172.18.18.18
set JAVA_OPTIONS=%JAVA_OPTIONS% -Dweblogic.webservice.transport.https.proxy.host=172.18.18.18
set JAVA_OPTIONS=%JAVA_OPTIONS% -Dweblogic.webservice.transport.http.proxy.port=8080
set JAVA_OPTIONS=%JAVA_OPTIONS% -Dweblogic.webservice.transport.https.proxy.port=8080
Pls suggest other options.

Popping up a dialog box on client side for authentication in a proxy server

hi all,
we have wriiten a code for proxy server.now we want to add the authentication code in the same which will authenticate client by popping up a dialog box on the client side.though no code runs on the client side.only the client has to open the browser and enter the credentials.
we dont know how to pop up this authentication window on the client side when he requsts for the service.
Its almost like a SQUID where the pop up box appears.
The code for our proxy server is
import java.net.*;
import java.io.*;
public class BasicProxyServer {
     private static int serverPort;
     private static String primaryServerHost;
     private static int primaryServerPort;
     // 1st arg: port to listen on     // 2nd arg: primary server IP     // 3rd arg: primary server port
     public static void main(String [] args) {
          serverPort = Integer.parseInt(args[0]);
          primaryServerHost = args[1];
          primaryServerPort = Integer.parseInt(args[2]);
          BasicServer bserv = new BasicServer(serverPort,primaryServerHost,primaryServerPort);
class BasicServer extends Thread {
     private int serverPort;
     private String primaryHost;
     private int primaryPort;
     private ServerSocket servSock = null;
     public BasicServer(int port, String primSrv, int primPort) {
          serverPort = port;
          primaryHost = primSrv;
          primaryPort = primPort;
          start();
     public void run() {
          Socket clientSock = null;
          Socket primaryServerSock = null;
          try {
               servSock = new ServerSocket(serverPort);
          catch (IOException e) {
               e.printStackTrace();
          while(true) {
               try {
                    clientSock = servSock.accept();
                    primaryServerSock = new Socket(primaryHost, primaryPort);
                    PipedInputStream fromClient = new PipedInputStream();
//BufferedReader br= new BufferedReader(new InputStreamReader(clientSock.getInputStream()));
//String ipline=br.readLine();
//History hi=new History();
//hi.writeHistory(ipline);
//try{
//hi.getHistory();
//catch(ClassNotFoundException cne){
// System.out.println(cne);
                    PipedOutputStream toMainServer = new PipedOutputStream(fromClient);
                    PipedInputStream fromMainServer = new PipedInputStream();
                    PipedOutputStream toClient = new PipedOutputStream(fromMainServer);
                    Talk clientToMainServer = new Talk(clientSock, fromClient, primaryServerSock, toMainServer);
                    Talk mainServerToClient = new Talk(primaryServerSock, fromMainServer, clientSock, toClient);
                    clientToMainServer.start();
                    mainServerToClient.start();
               catch (IOException e) {
                    e.printStackTrace();
protected void finalize() {
if (servSock != null) {
try {
servSock.close();
} catch (IOException e) {
e.printStackTrace();
servSock = null;
class Talk extends Thread {
     private Socket incoming;
     private Socket outgoing;
     private InputStream in;
     private OutputStream out;
String urlrequest="";
     private InputStream from;
     private OutputStream to;
     Talk(Socket inSock, InputStream in, Socket outSock, OutputStream out) {
          this.in = in;
          this.out = out;
          incoming = inSock;
          outgoing = outSock;
     public void run() {
          int aByte;
          try {
               from = incoming.getInputStream();
               to = outgoing.getOutputStream();
               while(( aByte = from.read()) != -1 ) {     //read from socket
                    out.write(aByte);
if(new Integer("3128").equals(incoming.getPort()))
urlrequest=urlrequest+out.toString();
urlrequest=urlrequest+incoming.getPort()+outgoing.getPort();
// write to pipe`
                    // read the byte from the pipe
                    to.write(in.read());          // write it to the output socket stream
                    to.flush();
System.out.println(urlrequest);
               to.close();
               from.close();
               if(incoming != null) {
                    incoming.close();
                    incoming = null;
               if(outgoing != null) {
                    outgoing.close();
                    outgoing = null;
          catch (SocketException e) {
          // there is one for a closed socket. Seems to have no effect.
          //     e.printStackTrace();
          catch (IOException e) {
               e.printStackTrace();
waiting for reply.....

Install a java.net.Authenticator.

Configuring authentication in web proxy server

We are using iPlanet Web Proxy Server 3.6 on WindowsNT 4.0
After installation of iplanet web proxy server 3.6, and making a request for internet access through browser it does not ask for authentication. There is no pop up window received for user name password to authenticate users.
Upon creating a group and then adding a few members (user1,user2,user3 etc.) to it, we configure rules to restrict user access to internet in the Global settings tab. After saving all the configuration and taking a restart of the proxy server, when we try to log on to internet from a
different client machine (browser) using an existing user id and password, it does not prompt us for user name and password even though the option "restrict access" in global setting is properly set.
My first question......
=>DOES iPlanet Web Proxy allow for such authentication pop up ??
=> If Yes, then kindly let us know where we have gone wrong in configuring the server.
We are NOT using any webserver or LDAP to authenticate users. No SSL is enabled.
Please suggest.

We are using iPlanet Web Proxy Server 3.6 on WindowsNT 4.0
After installation of iplanet web proxy server 3.6, and making a request for internet access through browser it does not ask for authentication. There is no pop up window received for user name password to authenticate users.
Upon creating a group and then adding a few members (user1,user2,user3 etc.) to it, we configure rules to restrict user access to internet in the Global settings tab. After saving all the configuration and taking a restart of the proxy server, when we try to log on to internet from a
different client machine (browser) using an existing user id and password, it does not prompt us for user name and password even though the option "restrict access" in global setting is properly set.
My first question......
=>DOES iPlanet Web Proxy allow for such authentication pop up ??
=> If Yes, then kindly let us know where we have gone wrong in configuring the server.
We are NOT using any webserver or LDAP to authenticate users. No SSL is enabled.
Please suggest.

In iPlanet Web Proxy Server 3.6 on Win2000, how do I turn on authentication? I want to force users to enter an id and pw when they go thru the proxy to websites out on the net. Thanks

Mal,
You'll need to point to some user database, either the local db on Proxy or an ldap server. The ldap server is the best choice as the local db just stores users in a flat file and becomes unreliable after 1000 entries.
To enable authentication, manage the proxy server instance and navigate to Restrict Access.
From there, turn on access control, and click on the Permissions button. This will open up a new window to allow you to setup your access control rules and restrictions. When you're done, click on Done, apply your changes and restart the proxy server and you should be on your way.

Proxy server keeps asking for authentication

My MacOS10.7.3 server coordinates a small subnet of 100 macs. To access the internet as provided by the larger organisation we must go through a proxy server. Unfortunately the proxy server keeps asking for authentication and checking the Remember This Password barely helps. Any tips would be appreciated.

Hi, the reply by ctzsnooze in the following thread was very helpful to me:
https://discussions.apple.com/message/23848959#23848959

CE-505 w/Microsoft Proxy Server Authentication

Similar Messages

Maybe you are looking for