Recently in support we have seen a number of authentication issues caused by Apple's iCloud application, and the Dropbox client.

 

The is that the iCloud application or the Dropbox client will submit erroneous credentials to the proxy (username of None). These credentials are then forwarded by the Web Gateway to the Domain controller and the domain controller will take a long time to process the credentials.

 

dropbox-icloud.jpg

 

-Name: Check Proxy-Authorization Header for Bad Credentials

-Criteria:  Header.Request.Exists("Proxy-Authorization") equals true

  AND Header.Request.Get("Proxy-Authorization") equals "Basic Tm9uZTpOb25l"

-Action: Stop Rule Set

-Event: Set Authentication.UserName = "BadCredentials"

 

Best Regards,

Jon