Configure authentication method for Web Proxy clients (outgoing requests)

To configure authentication method for Web Proxy clients (outgoing requests)

In the console tree of ISA Server Management, click Networks.
In the details pane, select the Networks tab, and then select the applicable network.
On the Tasks tab, click Edit Selected Network.
On the Web Proxy tab, click Authentication.
In Method, select the applicable authentication method.

Notes

For more information about authentication in ISA Server, see Authentication Concepts in ISA Server 2006 at the Microsoft ISA Server TechCenter Web site (http://www.microsoft.com).
To open ISA Server Management, click Start, point to All Programs, point to Microsoft ISA Server, and then click ISA Server Management.
For ISA Server 2006 Enterprise Edition, expand Microsoft Internet Security and Acceleration Server 2006, expand Arrays, expand Array_Name, expand Configuration, and then click Networks.
For ISA Server 2006 Standard Edition, expand Microsoft Internet Security and Acceleration Server 2006, expand Server_Name, expand Configuration, and then click Networks.

Important

These authentication mechanisms can be used simultaneously on a Web listener: Basic, Digest, Integrated Windows, and client certificate authentication. When selected, RADIUS, SecurID, or forms-based authentication methods must be the only authentication mechanism configured.
When you enable SecurID authentication on a computer running Microsoft Windows Server 2003, the Network Service account requires read/write access to the following registry key: HKLM\Software\SDTI\ACECLIENT.
Kerberos authentication depends upon User Datagram Protocol (UDP) packets that are commonly fragmented. If your ISA Server computer or array is in a domain, and you enable the blocking of IP fragments, Kerberos authentication will fail. For example, if the computer uses Kerberos for authentication during user logon, logon will fail. We recommend that you do not enable the blocking of packets containing IP fragments in scenarios where Kerberos authentication is used.