For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

SSell's avatar
SSell
Icon for Altostratus rankAltostratus
Aug 02, 2016

http monitor with authentication failing

I am trying to setup a health monitor for our OnBase web servers that includes authentication. Doing captures I see it send a basic authentication and get a 401 unauthorized response. However then the F5 sends GET /OnBase/Login.aspx , NTLMSSP_NEGOTIATE and immediately sends a FIN packet. I have had the server team try to remove Negotiate from IIS Authentication which had no effect in what I'm seeing. Any suggestions?

 

application delivery
LTM

5 Replies

  • nathe's avatar
    nathe
    Icon for Cirrocumulus rankCirrocumulus
    Aug 03, 2016

    SSell, have you seen this solution re send strings with authentication? https://support.f5.com/kb/en-us/solutions/public/2000/100/sol2167.html

     

  • SSell's avatar
    SSell
    Icon for Altostratus rankAltostratus
    Aug 03, 2016

    Thank you very much Nathan. That has resolved the issue providing the server doesn't require Negotiate to be above NTLM in the IIS configuration.

     

    You want to make that comment an answer and I will select that as the answer?

     

  • nathe's avatar
    nathe
    Icon for Cirrocumulus rankCirrocumulus
    Aug 03, 2016

    SSell, have you seen this solution re send strings with authentication? https://support.f5.com/kb/en-us/solutions/public/2000/100/sol2167.html