We have an UTM625 FW version 9.505-4. I am having an intermittent issue with filtering authentication. We are using AD for authentication and sometimes, intermittently, it will pop up asking for a username and password on a site that should be allowed for that profile. I'll give an example. We have a basic policy for non-authenticated users that warns for the shopping category. If I visit a shopping site, most of the time, it will bring up the page just fine, then after an undetermined amount of time, if I visit another shopping site or refresh the site I was one, I get a warn page and sometimes an authentication box for username and password. If this was a blocked site, it would show the block page. If I enter my credentials, it will work. I have checked the Web filtering log files during the time that it happens and I can see where it shows my username when working, but then for some reason, the username is not shown and that is when I get the basic profile. Not exactly sure what mechanism to check for when this happens, however, it is happening to all users throughout the day. I get calls regularly asking to unblock a site that when I run the Policy Helpdesk against their username it shows it is allowed. It may be unrelated, but Internet seems to be slower lately too. See attached screenshot from the logs. You can when my username shows up, the site is allowed, then it shows blocked, no username while on the same site.
This thread was automatically locked due to age.