guest history recorded when not added to proxy access list

[oig01]

I have not added the guest profile to the www proxy service policy list access yet in the history log there is occasionally a guest log showing a visit to a website.

The www proxy default rights are set to are ignored.

Should I disable the guest profile since its not even used.

[adrien]

Hi

By default when anything connects to WinGate it's in the Guest account.

Since the WWW proxy can authenticate, we give the users a chance to try authenticating to establish credentials. Otherwise if Guest wasn't allowed access, then noone could authenticate to become anyone other than Guest, and all access would be blocked.

So that log entry should only be showing a request, which should have been denied. There should be another log entry showing access denied if the Guest account isn't enabled for the WWW proxy.

Also, make sure that some other policy doesn't grant it access. E.g. if you have selected that System policies "may be granted instead", in the access policy in the WWW proxy, then the system policy may be granting access to Guest.

We don't recommend disabling the Guest account at all.

[oig01]

There was nothing logged as access denied on the system messages for the guest account even though the audit feature is enabled for that profile.

On the history log it shows three guest records of duration 0 sec, 16 secs and 12 secs from the same system.

One thing i noticed is that the Guest account is not part of a group (not even users) is this needed.

[logan]

I imagine that all the Guest entries are associated with the initial request: being made through the WWW Proxy. When the client first sends the request to WinGate, it is using the guest account by default. If your policies do not allow the guest account to access the internet, WinGate has to reply to the client computer and ask the client to authenticate itself.

So you are bound to find a few Guest entries in the WWW Proxy log. This is simply traffic from your client computers before they have authenticated themselves.

If you could include a few examples of these Guest entries from the logfile, we (the forum) could take a look and tell you what was actually going on when that guest entry was recorded.