seeing same session as other user

[edwinhunt]

hi all,



i'm not sure if this is a cache problem or what. i have a brand new windows 2003 w/sp1 member server and i installed isa 2k4 w/sp2 and nothing else.

this server is solely built as a caching server (unihomed server - 1 nic). all updates and fixes are up to date. the problem is users can see other users session. for example, user "1" opens up

http://www.nytimes.com

then login to that page. and then on a different pc, user "2" then goes to the internet then launches

http://www.nytimes.com,

when the website loads up it's showing "user 1" name on the page as if user "1" had login where in fact it user's "2" session on a totally different pc (user "2" pc). it looks like it's the cache that's doing this. i know that you can configure a rule for cache exceptions and you add the websites to it but i would like to avoid this as much as possible. the reason being there's so many websites nowadays such as yahoo, boston.com etc.. that would let you create login names on their page and then customize it to your liking. if i create that rule then start populating with these sites then to me it's defeating the purpose of a cache server. is this a bug? or is there a checkbox that i forgot? any help is very much appreciated!!!



thanks,

edwin

 

[coco10]

Hi, put an acces rule to require auth always for the internet acces to the proxy.

coco10

 

[edwinhunt]

hi coco10,

i'm new to isa. can you please tell how i can do this? also does this mean that if they open IE, there will be a login window prompting them to login?

thanks in advance,
edwin