From: Sean C on
Hi all,

SBS 2003 and ISA. I use a URL blacklist in ISA and have added most, if not
all, social networking sites to the list because of abuse within our office.
However, when many pages load that have widgets or links to some of the
sites in our blacklist (specifically Facebook), the user is prompted with a
logon window.

Last year this was a mere nuisance as I told my staff to just click cancel
(and the facebook link would show the 'page cannot be displayed' message).
However, it seems like Facebook links have proliferated to many of the other
websites we are using on a daily basis and clicking cancel on these
credential requests is becoming a pain. I could just open FB back up to the
masses, but I would prefer not to for the sake of security and web abuse.

Is there any way to prevent these logon requests (which will fail, anyway)
from occuring on websites with links to items in my ISA url blacklist?

Thanks for your time,

Sean

*Here is a link to screenshots of the issue:

1) http://img820.imageshack.us/img820/456/69918134.jpg

then

2) http://img715.imageshack.us/img715/8292/94909151.jpg


From: Steve Foster on
Sean C wrote:

> Hi all,
>
> SBS 2003 and ISA. I use a URL blacklist in ISA and have added most,
> if not all, social networking sites to the list because of abuse
> within our office. However, when many pages load that have widgets or
> links to some of the sites in our blacklist (specifically Facebook),
> the user is prompted with a logon window.
>
> Last year this was a mere nuisance as I told my staff to just click
> cancel (and the facebook link would show the 'page cannot be
> displayed' message). However, it seems like Facebook links have
> proliferated to many of the other websites we are using on a daily
> basis and clicking cancel on these credential requests is becoming a
> pain. I could just open FB back up to the masses, but I would prefer
> not to for the sake of security and web abuse.
>
> Is there any way to prevent these logon requests (which will fail,
> anyway) from occuring on websites with links to items in my ISA url
> blacklist?

Yes, open the rule properties, go to the Action tab and set the
redirect requests option to an internal webpage (it need only be an
empty HTML page).

--
Steve Foster
For SSL Certificates, Domains, etc, visit.:
https://netshop.virtual-isp.net
From: Sean C on

"Steve Foster" <stevefoster(a)invalid.invalid> wrote in message
news:xn0gvgdid2efm8f006(a)news.eternal-september.org...
> Sean C wrote:
>
>> Hi all,
>>
>> SBS 2003 and ISA. I use a URL blacklist in ISA and have added most,
>> if not all, social networking sites to the list because of abuse
>> within our office. However, when many pages load that have widgets or
>> links to some of the sites in our blacklist (specifically Facebook),
>> the user is prompted with a logon window.
>>
>> Last year this was a mere nuisance as I told my staff to just click
>> cancel (and the facebook link would show the 'page cannot be
>> displayed' message). However, it seems like Facebook links have
>> proliferated to many of the other websites we are using on a daily
>> basis and clicking cancel on these credential requests is becoming a
>> pain. I could just open FB back up to the masses, but I would prefer
>> not to for the sake of security and web abuse.
>>
>> Is there any way to prevent these logon requests (which will fail,
>> anyway) from occuring on websites with links to items in my ISA url
>> blacklist?
>
> Yes, open the rule properties, go to the Action tab and set the
> redirect requests option to an internal webpage (it need only be an
> empty HTML page).
>
> --
> Steve Foster
> For SSL Certificates, Domains, etc, visit.:
> https://netshop.virtual-isp.ne

Thanks so much Steve. I feel like having a facepalm moment...should have
looked at that redirect option on day one.

Have a good week,

Sean