NTLM issue

Hi all

 

 

I am using a pair of 9.2 big ip to load balance internet traffic to 2 bluecoat proxies. Users are authenticated using NTLM.

 

 

We have an serious issue with this setup.

 

 

The NTLM authentication process use 4 packets t

 

 

Client BigIP Proxy

 

------ get www.google.com --->

 

<---------- 407 -------------

 

------ NTLMSSP_NEGOCIATE ---->

 

<----- NTLMSSP_CHALLENGE ----

 

------ NTLMSSP_AUTH ---->

 

<---------- 200 -------------

 

this sequence is a successful authentication.

 

 

 

But sometimes, we only get 407 and NTLMSSP_NEGOCIATE when we use the bigip. Users are then considered as anonymous and they can't access any website.

 

 

This only happens when we go through the bipip.

 

 

Any idea ?