cancel
Showing results for 
Search instead for 
Did you mean: 
mardes
Level 7

Problems with JAVA and proxy authentication

Hello!

we have problems with a lot of Java URLs.  They don't  work when proxy http authentication is active.

When we add the URL to list "unauthorized URLs (means that http proxy authentication does not take place)  it works.

We have   MWG V7.1.0.2 , clients do  NTLM authentication.

One example URL which does not work with proxy auth  is  the link "test the currently installed version of java"   in   http://www.java.com/en/download//testjava.jsp 

We sometime see  "authentication failed" in java console

and a lot of  "http 407" errors in access.log of MWG.

How can we solve this issue?

Best regards,

Michael Ardes

0 Kudos
3 Replies
mardes
Level 7

Re: Problems with JAVA and proxy authentication

We found that it is a problem with bad performance of NTLM authentication only

It occurs not only with JAVA pages but also with other types of content.

.

Situation improved since we increased values of  NTLM cache timeout and

"cache authenticated user" time interval in NTLM-Agent.

Best regards,

Michael Ardes

0 Kudos
stefan_obel
Level 7

Re: Problems with JAVA and proxy authentication

Just one more thing:

java apps can't handle the 407 for transparent auth neither can they forward an auth prompt the proxy may display to the actual client (browser)

it is often beneficial to exclude certain user agents from running any authentication rules - mind the consequences

0 Kudos
cestrada
Level 7

Re: Problems with JAVA and proxy authentication

I'm beginning to see more issues with Mcafee WebGateway and JAVA URL sites.  I upgraded to  7.1.5.2.0  hoping this will resolve my problems - but no success.  Anyone else having these issues??

Java site that requires a username\ password time out or simply displays a blank page. 

Checking the Access Logs , I see "authentication failed" .

0 Kudos