IT Employment

Ask something
Discussion Locked

IE6 and MS Proxy

0 helpful
1 reply

by tnunetworksupport 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I've recently installed Microsoft Internet Explorer 6.0 and have discovered that if I set the Connection settings to "auto-detect" the proxy, IE6 will pass right by my MS Proxy server (and WebSENSE) and !BOOM! create an unfiltered/uncensored internet connection.

I must humbly admit that I do not see how IE6 has this capability. This was not possible in IE5. Obviously, there is something here that I don't understand. We do block outbound traffic on port 80 from within our Cisco router.

Any thoughts??

-Joe

1 reply

by jp

We have the same setup as you. We run MS Proxy 2.0 sp1 Websense and IE 5 & 6. Not sure if you've tried this or not, but here goes.

If you have the winsock proxy client installed, you can bypass "WEB PROXY" and use the winsock proxy. So what you have to do is set permissions on the "WINSOCK PROXY" that does NOT allow any users (except maybe the admin) to use the http, https, and ftp. The Websense product ONLY protects the "WEB PROXY" service.....not the winsock. Easiest thing to do is put all your users in a global group like "internet user" and then deny access to this group for only those services. When they try to pass through and get denyed, the web browser will print an error. This forces the user to have proxy settings in the browser.
NOTE: if you only deny on those ports, then the users will still be able to do winsock apps, like real audio and others. Also this forces the user to use the web proxy's cache, which is not used when the user establishes a session onwinsock proxy. Hope this helps and email me if you need more, info as I am well versed in this specific topic.

This discussion is closed to new replies.