Forum Discussion
AceDawg1
Nimbostratus
NimbostratusF5 as Transparent HTTP Proxy + NTLM Auth
Good day F5 Gurus!
I've got a setup using the F5 as a transparent HTTP forward proxy. The client requirements include obtaining logon creds without prompting the user for authentication. I was a...
Michael_Koyfma1
Cirrus
CirrusWhat is your end goal? Just to authenticate users via NTLM before they go out to the Internet? Do you have URL filtering requirements as well?
- AceDawg1
Hi Michael,
The end goal is to simply auth users via NTLM before they go out to the Internet. There's a Palo Alto performing URL filtering, virus scanning, etc. If not, I would have looked at implementing SWG.
- Michael_Koyfma1
In that case, you should setup your policy as Captive Portal per this description:
Essentially, your actual policy could almost remain the same, but you need to enable Captive Portal on your Access policy. Also, it may be a bit misleading, but also leave session identification as IP address instead of NTLM credentials, as for transparent portal, that is the only option that can work.
