We have a windows 2000 small business server. Due to the fact that we also
have a Watchguard Firebox 700 in our environment, I have not really looked
too closely at the value edded by configuring the IAS server.
However, now we are in a bit of a predicament. Because we are being 1:1
NATTED to our firebox by our wireless IP provider (where our public IP is
located), the java authentication applet running on the Firebox that a
remote user would normally run before they could get through the firewall
does not know the IP address of the actual browser that initiated the
request. It only knows the exteral IP of the Firebox which is a private ip -
not our public IP.
(Don't ask questions - it just doesn't work - Watchguard tech support has
told me so!!!) So, because of this we have not been able to authenticate any
remote users before they actually get to our production servers. ''
The only authentication (we user terminal services, Outlook Web Access and
have an FTP server as well) is when they actually have to supply a domain
username/password - and if supplied correctly - gain access to our Terminal
server...
I now want to change this so that a user must authenticate first and then if
authenticated, will be able to access the terminal server, FTP server,
etc... I really wanted to have this authentication take place prior to
hitting my production machines, but I don't see any other solution (unless
someone else has) to doing this... The firewall is obviously the best place
to provide this security feature...
What would I have to configure in IAS to provide this type of a thing? A
RADIUS server?
Any help in this matter would be greatly appreciated!
Thanks,
brad