Getting http and https proxy to work (kerberos)

[Kedgar]

Hello,

We are trying to deploy Trustwave Secure Web Gateway with Kerberos auth and are having a ton of issues ranging from performance to sites just not functioning. Kerberos is working properly... so the hard part is out of the way.

Has anyone here been successful at implementing a kerberos-authenticated proxy for your Macs? We are doing authenticated proxy for user tracking... this is an important need per PCI-DSS and SOX compliancy.

[bentoms]

@Kedgar we used Websense with Kerberos auth with little or no issues on Mac & Wins.

We essentially enabled Kerberos auth on the proxies, then pointed the clients at the proxy & they authenticated using the users Kerberos ticket.

[jrserapio]

@bentoms Sorry for bringing up an old thread, but are you using an authenticated proxy? if yes are you able to get MDM function to work on your macs with the proxy? Also have you run into any issues with Websense and the Macs, i.e. Websense blocks the native screenshot utility, websense blocks the use of programs like Xcode because of use of the same libraries etc?

thanks in advance

[bentoms]

@jrserapio it's been a while.

But we never enabled SSL inspection, as MDM does certificate pinning. That can bust things.

No client was installed, so no issues on the Macs.

[nick_king]

Is Kerberos listed as the first authenticate method on your Proxy servers? Mac's don't use other methods like NTLM, so if those are first it stops there and won't proceed to Kerberos.