Can you set up WSA's to do dual authentication?

ND4EVER_ironport · ‎08-27-2008

We are currently running two S650's load balanced in a WCCP environment utilizing "NTLMSSP or Basic" authentication. This works flawlessly for our users that are logged into the domain. For users that are not part of the domain they are getting prompted to authenticate twice (once by each appliance).

Is there anyway for the appliances to some how replicated authentication between themselves so that when a non domain user authenticates against one the other one does not ask again?

jowolfer · ‎08-28-2008

There is no way for one WSA to share credential details with another.

In this scenario, it is recommended that you use client based redirection, This is configurable from within the WCCP service settings in the GUI.

The option is called "Load balance based on client address".

You will have to use a custom service ID (not 0 / web-cache). It is recommended that you use ID 90.

ND4EVER_ironport · ‎09-02-2008

Thanks Josh. We have a change record out to update our WCCP config.