Smoothwall Unauthenticated IP

[Techdw]

Hi All,

 

My data manager is trying to use Sisra and its hitting smoothwall everyone allow policy but coming up as unauthenticated ip when I check real time.

 

With all the support credit issues with smoothwall, i cant even phone them up for help.

 

Any ideas would be good. Thanks

[OB1]

It's quite possible Sisra doesn't understand authenticating proxies.

What's it not doing that it should?

Also, in the realtime logs, where is it trying to connect to and what responses are you getting?

[forkies]

I am getting this too, we had new smoothwall installed over half term. It is not showing blocking on the realtime but is showing a lot its IP rather then the username going to sisra. Then we get an error message saying it cannot connect / offline.

@Techdw did you get anywhere with this?

[OB1]

Yup, sounds like Sisra doesn't understand auth.

Find out which domains it's connecting to (we can't as we don't have the application) and make them authentication exceptions.

Its not uncommon for applications not to understand proxies, so this is a bit of a get out of jail free card.

[AliG]

I don't think Sisra is an application I'm sure its entirely web based

[Steve21]

I don't think Sisra is an application I'm sure its entirely web based

 

You still need to bypass it for a lot of websites too, been having this argument a lot recently "apparently" it's our authentication that isn't working properly Seems however these websites are working it's coming through Smoothwall as an IP and as such no policy applies to it (as it's not recognised as the staff/student etc), so it can't authenticate with Smoothwall and gets blocked.

 

Bypassing the authentication on the website (e.g. Guardian Authentication Exceptions) means the IP hits get through as it's not checked against any authentication and work fine.

 

Steve

Edited November 6, 2015 by Steve21

[tom_newton]

If its hitting an allow policy, auth is probably a red herring. Transparent proxy by any chance?

[Steve21]

If its hitting an allow policy, auth is probably a red herring. Transparent proxy by any chance?

 

Does it on non-transparent too. Doesn't register as linked to a user/group so doesn't authenticate and blocks it.

 

Steve

[plexer]

With all the support credit issues with smoothwall, i cant even phone them up for help.

 

But there aren't any issues? if you need help with the configuration of the product for a specific use case which isn't a failure of the product then you will need to use a support credit for them to help you on this.

 

Ben

[CyberDrac]

Thread Resurrection ... did anyone get to the bottom of this? We have tried exactly the same approaches with exactly the same results ... notably we are seeing error 100s in the realtime logs