IFPCEEWebProxy::SkipAuthenticationForRoutingInformation property

Article
08/27/2012

Applies to: desktop apps only

The SkipAuthenticationForRoutingInformation property gets or sets a Boolean value that indicates whether the Forefront TMG Web proxy will skip the authentication process for requests for routing information.

This property is read/write.

Syntax

HRESULT put_SkipAuthenticationForRoutingInformation(
  VARIANT_BOOL fSkipAuthentication
);

HRESULT get_SkipAuthenticationForRoutingInformation(
  VARIANT_BOOL *pfSkipAuthentication
);

' Data type: Boolean

Property SkipAuthenticationForRoutingInformation( _
  ByVal fSkipAuthentication As VARIANT_BOOL, _
  ByVal pfSkipAuthentication As VARIANT_BOOL _
) As Boolean

Property value

Boolean value that indicates whether the Web proxy will skip the authentication process for requests for routing information.

Error codes

These property methods return S_OK if the call is successful; otherwise, they return an error code.

Remarks

This property is read/write. Its default value is False (VARIANT_FALSE in C++).

By default, when the AlwaysAuthenticate property of the FPCWebListenerProperties object for a protected network, such as the Internal network, requires all users to authenticate, all HTTP GET requests, including WSPAD requests (HTTP GET requests for http://address:port/wspad.dat), from Forefront TMG Client and Firewall Client computers in the protected network will require authentication, regardless of the actual port assignment. However, Forefront TMG Client and Firewall Client do not support HTTP authentication, regardless of the authentication method selected (such as Basic authentication or Integrated authentication) and cannot react appropriately to the 401 Unauthorized response that Forefront TMG generates. Therefore, when a Forefront TMG Client or Firewall Client computer tries to retrieve the Wspad.dat file during automatic discovery, the Forefront TMG computer will not forward the request to the WPAD server. When the SkipAuthenticationForRoutingInformation property is set to True (VARIANT_TRUE in C++), the Web proxy skips the authentication process for WSPAD requests.

After the value of this property has been modified, the change must be written to persistent storage by calling the Save method, and the Microsoft Firewall service must be restarted for the change to take effect. For more information about restarting the Firewall service to apply changes, see Restarting Services After Configuration Changes.

This property cannot be accessed through Forefront TMG Management.

Examples

This VBScript script sets the value of the SkipAuthenticationForRoutingInformation property to True so that the Web proxy will skip the authentication process for requests for routing information. Note that this script must be run on an array member by an administrator with read/write permissions for accessing the array configuration. This script does not include error handling.

Sub SkipAuthenticationForRoutingRequests()
    ' Declare the objects needed.
    Dim root         ' The FPCLib.FPC root object
    Dim tmgArray     ' An FPCArray object
    Dim webProxy     ' An FPCWebProxy object
    ' Create the root object.
    Set root = CreateObject("FPC.Root")
    ' Get references to the array object
    ' and the Web proxy object. 
    Set tmgArray = root.GetContainingArray()
    Set webProxy = tmgArray.ArrayPolicy.WebProxy
    ' Configure the Web proxy to skip the authentication process for
    ' requests for routing information. 
    webProxy.SkipAuthenticationForRoutingInformation = True
    ' Save the new setting with the fResetRequiredServices parameter set
    ' to True so that the Firewall service will be restarted and the change
    ' will take effect.
    WScript.Echo "Saving the configuration..."
    webProxy.Save True
    WScript.Echo "Done!" 
End Sub
SkipAuthenticationForRoutingRequests

Requirements

Minimum supported client	Windows Vista
Minimum supported server	Windows Server 2008 R2, Windows Server 2008 with SP2 (64-bit only)
Version	Forefront Threat Management Gateway (TMG) 2010
IDL	Msfpccom.idl
DLL	Msfpccom.dll

Share via