adamf Posted March 17, 2011 Posted March 17, 2011 Our IT staff have just started using Prezi (Prezi - The Zooming Presentation Editor). We are having a problem with using via Forefront TMG2010 where either it simply doesn't load or if it does it will prompt for authentication when trying to upload pictures (for example). I've seen other sites do a similar thing and to get around it created a rule in TMG that sits above the main web access rule. This rule has the following settings: Action: Allow Protocols: HTTP, HTTPS From: Internal, Local Host To: Domain Name Set (which includes prezi.com) Condition: All Users On other sites this gets around the authentication issue, but not it seems with Prezi. The actual error is: 12209 Forefront TMG requires authorization to fulfill the request. Access to the Web Proxy filter is denied. If I change my proxy to Synetrix's proxy I have no problems using the site. Any ideas?
SYNACK Posted March 17, 2011 Posted March 17, 2011 Is that rule really high up on the list, ISA/TMG applies the rules from the top down so if you have another rule dealing with http above it that rule will be hit first and it will never make it to the open access rule lower down.
bio Posted March 18, 2011 Posted March 18, 2011 I would try to use logging to see whats the destination address or IP. I'll bet its not prezi.com and the application it pointing to a differerent destination. bio
adamf Posted March 18, 2011 Author Posted March 18, 2011 Is that rule really high up on the list, ISA/TMG applies the rules from the top down so if you have another rule dealing with http above it that rule will be hit first and it will never make it to the open access rule lower down. As a test I stuck it at the top of the list. I can get into the site, I upload the first picture - that works fine, subsiquent pictures cause TMG to prompt for authentication to continue. I give it my username and password and it just sits there, doesn't appear to upload the image. I'm getting the same reason for denying the connection. @bio - the destination is http://meeting05.prezi.com
tom_newton Posted March 18, 2011 Posted March 18, 2011 Can you tell TMG not to authenticate for certain sites? Some sites don't work well with authentication, due to badly written helper-apps.
bio Posted March 18, 2011 Posted March 18, 2011 Can you tell TMG not to authenticate for certain sites? Some sites don't work well with authentication, due to badly written helper-apps. He allready did this by placing the All users condition set. @bio - the destination is http://meeting05.prezi.com are you sure you have put *.prezi.com in the domain name set and not prezi.com ? bio... 1
adamf Posted March 21, 2011 Author Posted March 21, 2011 He allready did this by placing the All users condition set. are you sure you have put *.prezi.com in the domain name set and not prezi.com ? bio... No! That looks like the cause. I only had prezi.com. I now have *.prezi.com and it is working.
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now