WatchGuard and Active Directory

[dput]

We currently use a WatchGuard X1000 as our firewall, but we also have a Microsoft ISA Server acting as a firewall proxy on the inside of our network. The ISA server does serve as a proxy server, but it's biggest use is to authenticate users using Active Directory. We only allow authenticated users out, we have some employees who have no Internet Access.

Can we do this authentication from the WatchGuard? I would like to simplify our network and we are having problems with people not being able to do some functions with this double firewall arrangement.

Dan

 

[pankajchawla]

yes you can do this. you can intregrate the X-auth with HTTP access on watchguard. go to setup>>authentication server, chose the appropriate server and put the ip address of the server.
Hit the test button on the bottom of the same window. you should see all your users and groups listed there.

then you can use the outgoing field of the HTTP service to add the users who are allowed to go out.

YOU can also integrate webblocker with this by creating diffrent HTTP proxy services for doffrent groups and then adding then respectivly.

 

[dput]

Unfortunately, the Watchguard authentication using AD seems to require the users to enter their user name and password when they go to the internet. The ISA server picks up the credentials from the workstation which is much friendlier to the user.

I will not be able to implement this with it working this way. I am hoping that Watchguard will improve this in the near future.

Thanks,

Dan

 

[pankajchawla]

yeah...this is heard lots of times from people using watchguard that everyone will have to go to

https://fwipaddress

and then put in the uid and password info to get to the internet.

You being a watchguard customer can call 8772323531 and raise a feature request for this if you want...and that is free incident in your account.

 

[dput]

I have already contacted them and asked for this to be added. We now need everyone else to do so. I understand that these types of things are prioritized by the quantity of requests.

Dan