PIX, IAS, Internet and e-mail

[ebassi]

Hi,

in order to authenticate the users when they go to browse Internet I did a configuration using a PIX 515 and MS-IAS.

It works fine except when the user reads mails with Internet links (using Outlook).

For every Internet link into the message, the user has a request for authentication from the Radius server.

It seams that the authentication fails, the user has a new request for authentication for the next link and so on.

Any idea?

Any help would be appreciated.

Enrico

[gfullage]

This is bug CSCdr77921 (http://www.cisco.com/cgi-bin/Support/Bugtool/onebug.pl?bugid=CSCdr77921&Submit=Search), there's a bunch of resolved versions so first off make sure you're running one of those.

Make sure you follow the Fix instructions also. The "virtual-http" can be found in the following link, the mentioned is any unused IP address that'll get routed to the PIX.

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_63/cmdref/tz.htm#1037665