Forum Discussion
AceDawg1
Nimbostratus
NimbostratusF5 as Transparent HTTP Proxy + NTLM Auth
Good day F5 Gurus!
I've got a setup using the F5 as a transparent HTTP forward proxy. The client requirements include obtaining logon creds without prompting the user for authentication. I was a...
Michael_Koyfman
Cirrocumulus
CirrocumulusWhat is your end goal? Just to authenticate users via NTLM before they go out to the Internet? Do you have URL filtering requirements as well?
AceDawg1Hi Michael,
The end goal is to simply auth users via NTLM before they go out to the Internet. There's a Palo Alto performing URL filtering, virus scanning, etc. If not, I would have looked at implementing SWG.
- Michael_Koyfman
In that case, you should setup your policy as Captive Portal per this description:
Essentially, your actual policy could almost remain the same, but you need to enable Captive Portal on your Access policy. Also, it may be a bit misleading, but also leave session identification as IP address instead of NTLM credentials, as for transparent portal, that is the only option that can work.
