For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

rbirri_78684's avatar
rbirri_78684
Icon for Nimbostratus rankNimbostratus
Sep 30, 2008

NTLM issue

Hi all

 

 

I am using a pair of 9.2 big ip to load balance internet traffic to 2 bluecoat proxies. Users are authenticated using NTLM.

 

 

We have an serious issue with this setup.

 

 

The NTLM authentication process use 4 packets t

 

 

Client BigIP Proxy

 

------ get www.google.com --->

 

<---------- 407 -------------

 

------ NTLMSSP_NEGOCIATE ---->

 

<----- NTLMSSP_CHALLENGE ----

 

------ NTLMSSP_AUTH ---->

 

<---------- 200 -------------

 

this sequence is a successful authentication.

 

 

 

But sometimes, we only get 407 and NTLMSSP_NEGOCIATE when we use the bigip. Users are then considered as anonymous and they can't access any website.

 

 

This only happens when we go through the bipip.

 

 

Any idea ?
application delivery
dev
devops
iRules

1 Reply

  • Nicolas_Menant's avatar
    Nicolas_Menant
    Icon for Employee rankEmployee
    Sep 30, 2008
    Hi,

     

     

    Have you try to open a support case ? This section is about iRule so you may not receive the expecting help since the reader may not be the best suited for this

     

     

    If you want us to help you anyway i think some information like

     

    -Virtual server definition

     

    -Pool definition

     

     

    Those information may be useful to see what may be causing this. Those configuration information are in /config/bigip.conf