Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Proxy not working

  • 6 odgovori
  • 0 ima ovaj problem
  • 34 views
  • Posljednji odgovor poslao Mike Kaply

more options

Hello, from Terminal Servers, it is not possible to browse the Internet via FortiGate's explicit proxy from the Firefox browser, while there is no problem with Chrome or Edge. When the user tries to browse external sites, the proxy sends the error page "You need to authenticate to use this service". It seems that Firefox does not pass user authentication to FortiGate. The proxy authenticates users per session via Kerberos tickets.

Firefox version: 115.5.0esr

I also performed the following settings to pass the Kerberos ticket to the proxy without success: https://people.redhat.com/mikeb/negotiate/

I also noticed that it is not possible to change the "network.negotiate-auth.allow-proxies" setting from "false" to "true." Is this my problem? Is it normal that it cannot be changed?

Attached are the settings.

Thank you in advance.

Hello, from Terminal Servers, it is not possible to browse the Internet via FortiGate's explicit proxy from the Firefox browser, while there is no problem with Chrome or Edge. When the user tries to browse external sites, the proxy sends the error page "You need to authenticate to use this service". It seems that Firefox does not pass user authentication to FortiGate. The proxy authenticates users per session via Kerberos tickets. Firefox version: 115.5.0esr I also performed the following settings to pass the Kerberos ticket to the proxy without success: https://people.redhat.com/mikeb/negotiate/ I also noticed that it is not possible to change the "'''network.negotiate-auth.allow-proxies'''" setting from "false" to "true." Is this my problem? Is it normal that it cannot be changed? Attached are the settings. Thank you in advance.
Priloženi snimci ekrana

All Replies (6)

more options

It definitely should not be locked and it should default to true.

What do you see when you go to about:policies?

Helpful?

more options

It was a nested GPO that blocked that function. Now it is enabled but still the user does not pass authentication to the proxy. The same settings on a Laptop allow browsing Internet via proxy.

Helpful?

more options

So you're saying the exact same configuration works on one machine and not the other?

Helpful?

more options

The same configuration (Firefox version + proxy settings) works on any server/client, but does not work on a Terminal Server virtual machine (on which several users are connected at the same time).

Helpful?

more options

I think this might be a case where opening a bug in bugzilla is the right thing.

This isn't enterprise specifically but seems to be a problem with networking

https://bugzilla.mozilla.org/enter_bug.cgi?product=Core&component=Networking

Helpful?

more options

Were you able to open a bug?

Helpful?

Postavite pitanje

You must log in to your account to reply to posts. Please start a new question, if you do not have an account yet.