Couple of issues

[CraigM]

Hi Currently we are running wingate for our internal network and seem to have a wierd issue. As i am new to wingate i was wondering if anyone could help. I have tried to setup so our internal machines can download via windows update but seem to have problems.

NT4 Domain, XP Clients, IE6 & 7, Wingate version 6.1.4 (Build 1099)

Issues
1. Everytime we launch IE we get a logon box to authenticate. I read somewhere that there was a workaround any ideas.. We are running off a NT4 Domain so was not sure if was related to a none ADs Enviroment.

2. Also we seem to have a problem since upgrading to IE7 running windows update. If we revert back to IE6 it works fine but our current proxy settings and only seems to affect us when running IE7. I am in talks with MS as with working fine in IE6 thought was a IE issue but they seem to point to a connection issue. What is the best settings i would need to check to confirm the proxy server is setup ok.

Thanks in Advance
Craig Mitchell

[logan]

1. IE has it's own settings which control automatic authentication. It would pay to check these settings and make sure it is set to "Automatic logon with current username and password".

Internet Explorer -> Tools -> Internet Options -> -> Security -> Custom Level (for internet zone) -> User authentication (bottom of the list)

Other than that, NT4 domains are a bit before my time, so does anyone else on the forum have an opinion?

2. There have been some bug fixes in WinGate that relate to Windows Updates and IE7 since 6.1.4. I suggest upgrading 6.2.2 to obtain these updates and see if that improves your situation. Here are the changes


Version: 6.2 - Maintenance Release - Build 1121 Released: 23 November 2006

WinGate Engine - Bug fix - Fixed problem in the WWW proxy related to Windows Update (HEAD command).

[CraigM]

Hi logan been plodding on with trying to get the windows updates issue fixed. We upgraded as you suggested to the latest wingate etc 6.2.2 and still we are unable to browse on our xp machines sp2 IE7 the windows update site. If we downgrade to IE6 we can browse it with no problems. We have been working with microsoft in trying to find what is the problem and they seem to say it's due to how the proxy is parsing the headers with you have suggested have been fixed but still no luck. Any idea if we are missing anything. Am getting desperate out of ideas now so any help would be greatly appreciated.

Craig Mitchell

[adrien]

hi Craig

There's a known issue with IE7 and NTLM authentication which MS released an update for on windows updates. You might need to turn off WinGate authentication for that site (add a recipient, everyone, granted access to windows update sites without auth), or temporarily open access so that your IE can download the update it needs.

Regards

Adrien

[CraigM]

Thanks adrian for the help, any chance you know the ms kb files so can either manually test. Failing that any way that you can talk me through setting up to grant access to just windows update without auth. We use also puresight to normally just put a allow which has been assigned but sounds like is different what you are on about.

Craig

[CraigM]

Just as a follow i've managed to get to the windows update site when using https:// winupdate i managed to patch using all the patches on windows update and still i can't get to the site from just standard http: winupdate

As MS seem to think it is a Wingate issue i'm starting to feel at a loss.

(winupdate = url as urls are being blocked here when try to post exact link)
--------------------------------------------

Hi Craig,

As discussed, we have checked regarding the Windows Updates on all aspects related to Internet Explorer 7.0.

So far we haven’t received any such issues on Internet Explorer 7.0, and as per our test we are able to access Windows Update site with the direct Internet connectivity on the same machine.

Also as per the KB: 241783, we had seen some known issues with several proxy servers and hence we request you to please check with your vendor for the same.

Please do call or email me back any time if you need my further assistance.

Many thanks,

[adrien]

Hi

The KB I was referring to was KB904942, "Update for Windows XP". It's listed under Software, Optional.

As for adding rights for unauthed access to update sites, you just need to add a recipient policy to the WWW proxy, which grants unrestricted access to the sites used by windows update. I think from memory you can do this with an advanced filter, where the servername contains "windowsupdate"

Regards

Adrien