Allow Applications That Don't Support NTLM Authentication

Some applications don't support authenticated proxies (NTLM Identification / NTLM Authentication / Proxy Authentication), and have their own setup outlined here: Allow Access

If the application doesn't have its own article, follow these steps.

Procedure

1. Create a custom category for the appropriate domains, see our help topic, Creating custom categories. Avoid using the category that the domain in question belongs to, as this may contains domains for other applications.
2. Add the following to authentication exceptions, see our help topic, Creating authentication exceptions:
   • The new custom category.
   • SSL /CRL category.
   • Software Updates category.
3. Create an Allow web filter policy for the custom category, see our help topic, Creating web filter policies.
4. Move the new policy to be above any block policies in the Web filter policies table.

If you continue to experience issues, see our help topic, Monitoring user activity. You can filter the Web filter logs by the IP of a test client, attempt to open the site / application, and add the domains that appear in the web filter logs to the authentication exceptions.