Forum Discussion

Ivan_Blesa_2004's avatar
Ivan_Blesa_2004
Icon for Nimbostratus rankNimbostratus
Jul 22, 2015

NTLM authentication issue with POSTs in SWG

I have used an iApp to create a SWG instance with HTTPS inspection. I have then created an Access Policy to perform NTLM authentication. This is working correctly. However, when I send a POST that is big enough (more than 7-8k), while the POST is being sent, the BIG-IP sends an NTLM authentication request to the browser, what makes the browser hang. The behaviour should be to accept the whole POST and then respond requesting NTLM authentication, but that’s not happening… Any ideas on why this could be happening and how to solve it? Thanks!

 

2 Replies

  • Hm.., that I interesting. What version of SWG? What browser/OS? I would suggest opening a case with support and reach out to me with the case number - I will look into it as well to see if it's a bug or something else.

     

    Ideally, we'd want to get an HTTPwatch file that shows the behavior in addition the qkview uploaded to iHealth as well.

     

  • Thanks for your quick response! The system is running 11.6.0 build 0.0.401-Final. I've tried with different browsers (Firefox, Chrome, and I think I also tried IE) but it didn't seem to be related with the browser, so I focused into trying to understand the SWG behavior. The fact that it is not always sending the NTLM authentication request after the same number of bytes makes me think is a timing issue (after x ms it sends the request, which might be related with the time it takes to do whatever). I'll upload the required information tomorrow morning (BST). Thanks!