+ Post New Thread
Results 1 to 7 of 7
Internet Related/Filtering/Firewall Thread, Prezi and Forefront TMG2010 in Technical; Our IT staff have just started using Prezi ( Prezi - The Zooming Presentation Editor ). We are having a ...
  1. #1

    Join Date
    Apr 2007
    Location
    Croydon
    Posts
    504
    Thank Post
    18
    Thanked 31 Times in 30 Posts
    Rep Power
    22

    Prezi and Forefront TMG2010

    Our IT staff have just started using Prezi (Prezi - The Zooming Presentation Editor). We are having a problem with using via Forefront TMG2010 where either it simply doesn't load or if it does it will prompt for authentication when trying to upload pictures (for example).

    I've seen other sites do a similar thing and to get around it created a rule in TMG that sits above the main web access rule. This rule has the following settings:

    Action: Allow
    Protocols: HTTP, HTTPS
    From: Internal, Local Host
    To: Domain Name Set (which includes prezi.com)
    Condition: All Users

    On other sites this gets around the authentication issue, but not it seems with Prezi.

    The actual error is: 12209 Forefront TMG requires authorization to fulfill the request. Access to the Web Proxy filter is denied.

    If I change my proxy to Synetrix's proxy I have no problems using the site.

    Any ideas?

  2. #2

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    11,271
    Thank Post
    884
    Thanked 2,749 Times in 2,322 Posts
    Blog Entries
    11
    Rep Power
    785
    Is that rule really high up on the list, ISA/TMG applies the rules from the top down so if you have another rule dealing with http above it that rule will be hit first and it will never make it to the open access rule lower down.

  3. #3
    bio
    bio is offline
    bio's Avatar
    Join Date
    Apr 2008
    Location
    netherlands
    Posts
    520
    Thank Post
    16
    Thanked 130 Times in 102 Posts
    Rep Power
    38
    I would try to use logging to see whats the destination address or IP. I'll bet its not prezi.com and the application it pointing to a differerent destination.

    bio

  4. #4

    Join Date
    Apr 2007
    Location
    Croydon
    Posts
    504
    Thank Post
    18
    Thanked 31 Times in 30 Posts
    Rep Power
    22
    Quote Originally Posted by SYNACK View Post
    Is that rule really high up on the list, ISA/TMG applies the rules from the top down so if you have another rule dealing with http above it that rule will be hit first and it will never make it to the open access rule lower down.
    As a test I stuck it at the top of the list. I can get into the site, I upload the first picture - that works fine, subsiquent pictures cause TMG to prompt for authentication to continue. I give it my username and password and it just sits there, doesn't appear to upload the image. I'm getting the same reason for denying the connection.

    @bio - the destination is http://meeting05.prezi.com

  5. #5


    tom_newton's Avatar
    Join Date
    Sep 2006
    Location
    Leeds
    Posts
    4,507
    Thank Post
    871
    Thanked 862 Times in 681 Posts
    Rep Power
    199
    Can you tell TMG not to authenticate for certain sites? Some sites don't work well with authentication, due to badly written helper-apps.

  6. #6
    bio
    bio is offline
    bio's Avatar
    Join Date
    Apr 2008
    Location
    netherlands
    Posts
    520
    Thank Post
    16
    Thanked 130 Times in 102 Posts
    Rep Power
    38
    Quote Originally Posted by tom_newton View Post
    Can you tell TMG not to authenticate for certain sites? Some sites don't work well with authentication, due to badly written helper-apps.
    He allready did this by placing the All users condition set.

    Quote Originally Posted by adamf View Post
    @bio - the destination is http://meeting05.prezi.com
    are you sure you have put *.prezi.com in the domain name set and not prezi.com ?

    bio...

  7. Thanks to bio from:

    adamf (21st March 2011)

  8. #7

    Join Date
    Apr 2007
    Location
    Croydon
    Posts
    504
    Thank Post
    18
    Thanked 31 Times in 30 Posts
    Rep Power
    22
    Quote Originally Posted by bio View Post
    He allready did this by placing the All users condition set.



    are you sure you have put *.prezi.com in the domain name set and not prezi.com ?

    bio...
    No! That looks like the cause. I only had prezi.com. I now have *.prezi.com and it is working.



SHARE:
+ Post New Thread

Similar Threads

  1. [Windows Software] Forefront licensing
    By quietriot1983 in forum Licensing Questions
    Replies: 9
    Last Post: 7th January 2011, 09:34 PM
  2. Forefront Suite
    By gshaw in forum Windows
    Replies: 6
    Last Post: 3rd December 2010, 10:20 AM
  3. anyone using forefront TMG live yet?
    By HMCTech in forum Windows Server 2008
    Replies: 2
    Last Post: 9th October 2009, 08:40 AM
  4. ISA 2006 or Forefront
    By Gatt in forum Internet Related/Filtering/Firewall
    Replies: 6
    Last Post: 23rd July 2009, 08:39 PM
  5. Anyone using Microsoft Forefront?
    By GlennT in forum Wireless Networks
    Replies: 4
    Last Post: 9th September 2008, 12:15 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •