WinGate 7.2 Proxy Authentication

[anonim]

I have just installed WinGate 7.2 using the Free license option. I'm attempting to configure a proxy server which will take authenticated requests from an external host. I've configured my router to port forward the ports, and everything seems to work fine except that there is no authentication prompt. Under the Properties of the WWW Proxy Server service, I have NTLM disabled and Basic enabled (I'm using the WinGate user database and not AD/Windows). I don't see an option to specify which user accounts can be allowed to authenticate with the proxy server. I've read through a number of KB articles, but they're all written back in 2006 and don't seem to apply to WinGate 7.2. Please help, thank you.

[adrien]

Hi

HTTP authentication in WinGate is basically optional, since some clients don't support it very well. Therefore you need to specify not only which methods are available for use (in the proxy config), but also what circumstances auth is required.

The latter is done with policy or web access control.

If your web access control rules require the user to be known (e.g. be someone other than Everyone), then it will return an auth challenge to unauthenticated web browsers.

Similarly there is a sample policy for authentication if you'd prefer that route. In fact you can use either or both. Policy is evaluated (ProxyRequest) prior to web access control policy.

Also, there's nothing stopping you enabling NTLM in the proxy even if you are using the WinGate user database. It results in a few more requests to initialise the auth, but it's more secure than Basic, especially over the internet.

Regards

Adrien

[anonim]

Thank you. I was able to use the Access Rules feature to force authentication. I'm also using NTLM instead of Basic now and it seems to be working well.

[Crazy_Cooler]

Hi all!
Problem in Control Panel/Credentials Rule
Applay this rule if (chооse MAC address) matches хх хх хх хх хх хх
in what format to write the address?? хх хх хх хх хх хх ??? or хх-хх-хх-хх-хх-хх or хх:хх:хх:хх:хх:хх or хххххххххххх e.t.c.
My users status not assumed. worked only at IP or Computername. Help me please. WG 7.2.2 bild 3416

P.S. Sorry for my English, I use Google Translator, my language is russian.

[adrien]

Dobroe den!

the format for the MAC address in credential rules is space delimited, e.g. xx xx xx xx xx xx

Regards

Adrien