Troubleshooting proxy server configuration

KB Home   |   Troubleshooting proxy server configuration

Main.TroubleshootingProxyServerConfiguration History

Hide minor edits - Show changes to output

Changed lines 9-11 from:
For more information about PaperCut's proxy support see the [[https://www.papercut.com/tour/limit-internet-usage/|product tour]].

to:
Changed lines 26-28 from:
* If your logs do not contain your user names then your proxy server is not forcing users to authenticate to allow Internet access.  Configuring this is dependent on your proxy server.  For an example of how to configure this for ISA Server 2004, see the [[https://www.papercut.com/products/ng/download/|user manual]].

to:
* If your logs do not contain your user names then your proxy server is not forcing users to authenticate to allow Internet access.  Configuring this is dependent on your proxy server.  For an example of how to configure this for ISA Server 2004, see the [[https://www.papercut.com/download/ng/|user manual]].

Changed lines 9-11 from:
For more information about PaperCut's proxy support see the [[https://www.papercut.com/products/ng/tour/limit-internet-usage/|product tour]].

to:
For more information about PaperCut's proxy support see the [[https://www.papercut.com/tour/limit-internet-usage/|product tour]].

Changed line 60 from:
''Categories:'' [[Category.Troubleshooting|+]], [[Category.ProxyServers|+]]
to:
''Categories:'' [[Category.Troubleshooting|+]], [[Category.ProxyServers|+]]
Changed lines 9-12 from:
For more information about PaperCut's proxy support see the [[https://www.papercut.com/products/quota/tour/internet_monitoring/ | internet control product tour]].

!! Checking that users must authenticate to the Proxy server
to:
For more information about PaperCut's proxy support see the [[https://www.papercut.com/products/ng/tour/limit-internet-usage/|product tour]].


!!Checking that users must authenticate to the Proxy server
Changed lines 26-27 from:
* If your logs do not contain your user names then your proxy server is not forcing users to authenticate to allow Internet access.  Configuring this is dependent on your proxy server.  For an example of how to configure this for ISA Server 2004, see the [[https://www.papercut.com/products/quota/download/ | user manual]].
to:
* If your logs do not contain your user names then your proxy server is not forcing users to authenticate to allow Internet access.  Configuring this is dependent on your proxy server.  For an example of how to configure this for ISA Server 2004, see the [[https://www.papercut.com/products/ng/download/|user manual]].

Changed lines 37-38 from:
!!! Controlling Internet Access with Windows groups
to:

!!!Controlling Internet Access with Windows groups
Changed lines 46-47 from:
The configuration of diffent types of proxy server is out of scope of this article.  A detailed guide to configuring ISA Server for net quotas can be found in the [[https://www.papercut.com/products/ng/manual/net-proxy-configuration.html | user manual]].
to:
The configuration of different types of proxy server is out of scope of this article.  A detailed guide to configuring ISA Server for net quotas can be found in the [[https://www.papercut.com/products/ng/manual/net-proxy-configuration.html | user manual]].
Changed line 60 from:
''Categories:'' [[!PaperCutQuota]], [[!ProxyServers]]
to:
''Categories:'' [[Category.Troubleshooting|+]], [[Category.ProxyServers|+]]
May 04, 2009, at 01:26 AM by matt - Make the net control more NG focussed.
Changed lines 29-30 from:
To disable Internet Access when users have not credit available, PaperCut relies on the proxy server to deny the access.  When the user has no credit PaperCut, removes the user from the Windows security group that is defined the give Internet access to users.  The next time the user attempts to access the Internet through the Proxy server, the proxy server will see that the user does not belong to the security group and will deny access.
to:
PaperCut relies on the proxy server to deny Internet Access when users run out of credit.  So you must make changes your your proxy server access rules to deny users without credit.

PaperCut offers two approaches to integrate with proxy servers:
->'''1.''' By maintaing a Windows security group (which is then used in proxy server rules) - see below.
->'''2.''' For Squid proxy on Linux, you may also use a our "Squid ACL Helper" (see the [[https://www.papercut.com/products/ng/manual/apdx-proxy-squid.html#apdx-proxy-squid-acl | user manual here]] for more info.

!!! Controlling Internet Access with Windows groups

If you are running a Windows network and using Microsoft ISA Server (or Squid NT), then PaperCut can make use of Windows security groups to allow/deny Internet access.  When the user has no credit PaperCut, removes the user from the defined Windows security group that grants
Internet access to users.  The next time the user attempts to access the Internet through the Proxy server, the proxy server will see that the user does not belong to the security group and will deny access.
Changed lines 43-44 from:
The configuration of diffent types of proxy server is out of scope of this article.  A detailed guide to configuring ISA Server 2004 for net quotas can be found in the [[https://www.papercut.com/products/quota/download/ | user manual]].
to:
The configuration of diffent types of proxy server is out of scope of this article.  A detailed guide to configuring ISA Server for net quotas can be found in the [[https://www.papercut.com/products/ng/manual/net-proxy-configuration.html | user manual]].
Changed lines 52-55 from:
If these tests work correctly then disabling of Internet access will work within PaperCut.  You just need to set your 'Internet Users' Windows group in the PaperCut Net Charging Options screen.

If you have any other questions about proxy configuration, please feel free to email
support@papercut.com.
to:
If these tests work correctly then disabling of Internet access will work within PaperCut.  You then just need to setup the PaperCut Internet Control service to update your selected 'Internet Users' Windows group.  See the [[https://www.papercut.com/products/ng/manual/net-setup.html | Net Control Setup section in the manual]].

If you have any other questions about proxy configuration, please feel free to email the
support team.
Changed lines 9-10 from:
For more information about PaperCut's [[https://www.papercut.com/products/quota/internet_monitoring/ | proxy support]] see the [[https://www.papercut.com/products/quota/internet_monitoring/ | web monitoring product tour]].
to:
For more information about PaperCut's proxy support see the [[https://www.papercut.com/products/quota/tour/internet_monitoring/ | internet control product tour]].
Changed lines 18-20 from:
-->[@192.168.1.1 matt Mozilla/4.0 (compatible; MSIE 6.0) 2004-09-22 10:42:07 VM-ISA-SERVER - slashdot.org 66.35.250.150 80 2312 373 43937 http GET http://slashdot.org/ Inet 200 PaperCut Internet Rule - Internal External 0x480 Allowed@]

to:
-->@@[=192.168.1.1 matt Mozilla/4.0 (compatible; MSIE 6.0) 2004-09-22 10:42:07 VM-ISA-SERVER - slashdot.org 66.35.250.150 80 2312 373 43937 http GET http://slashdot.org/ Inet 200 PaperCut Internet Rule - Internal External 0x480 Allowed=]@@

Changed lines 23-26 from:
* If the logs are correctly showing the username then PaperCut will be able to [[https://www.papercut.com/products/quota/internet_monitoring/ | charge users for Internet usage]].  To verify this you can see net usage logs appear in PaperCut once PaperCut is installed and configured correctly. If you want to enforce [[https://www.papercut.com/products/quota/internet_monitoring/ | Internet Quotas]] and disable internet access for users without credit skip to the next section.

* If your logs do not contain your user names then your proxy server is not forcing users to authenticate to allow Internet access.  Configuring
this is dependent on your proxy server.  For an example of how to configure this for ISA Server 2004, see Appendix 2 of the [[https://www.papercut.com/products/quota/download/ | PaperCut User Guide]].
to:
* If the logs are correctly showing the username then PaperCut will be able to charge users for Internet usage.   To verify this you can see net usage logs appear in PaperCut once PaperCut is installed and configured correctly. If you don't want to enforce internet quotas and disable internet access for users without credit skip to the next section.

* If your logs do not contain your user names then your proxy server is not forcing users to authenticate to allow Internet access.  Configuring this is dependent on your proxy server.  For an example of how to configure
this for ISA Server 2004, see the [[https://www.papercut.com/products/quota/download/ | user manual]].
Changed lines 35-36 from:
The configuration of diffent types of proxy server is out of scope of this article.  A detailed guide to [[https://www.papercut.com/products/quota/internet_monitoring/ | configuring ISA Server 2004 for net quotas]] can be found in Appendix 2 of the [[https://www.papercut.com/products/quota/download/ | user guide]].
to:
The configuration of diffent types of proxy server is out of scope of this article.  A detailed guide to configuring ISA Server 2004 for net quotas can be found in the [[https://www.papercut.com/products/quota/download/ | user manual]].
Changed lines 48-49 from:
''Categories:'' [[!PaperCutQuota]], [[!ProxyServers]]
to:
----
''Categories:'' [[!PaperCutQuota]], [[!ProxyServers]]
Added lines 1-2:
(:title Troubleshooting proxy server configuration:)
Changed lines 9-10 from:
For more information about PaperCut's [[http://www.papercut.biz/screen_net.htm |proxy support]] see the [[http://www.papercut.biz/screen_net.htm |web monitoring product tour]].
to:
For more information about PaperCut's [[http://papercut.biz/products/quota/internet_monitoring/ | proxy support]] see the [[http://papercut.biz/products/quota/internet_monitoring/ | web monitoring product tour]].
Changed lines 23-26 from:
* If the logs are correctly showing the username then PaperCut will be able to [[http://www.papercut.biz/screen_net.htm |charge users for Internet usage]].  To verify this you can see net usage logs appear in PaperCut once PaperCut is installed and configured correctly. If you want to enforce [[http://www.papercut.biz/screen_net.htm |Internet Quotas]] and disable internet access for users without credit skip to the next section.

* If your logs do not contain your user names then your proxy server is not forcing users to authenticate to allow Internet access.  Configuring this is dependent on your proxy server.  For an example of how to configure this for ISA Server 2004, see Appendix 2 of the [[http://www.papercut.biz/pcstandard_download.htm |PaperCut User Guide]].
to:
* If the logs are correctly showing the username then PaperCut will be able to [[http://papercut.biz/products/quota/internet_monitoring/ | charge users for Internet usage]].  To verify this you can see net usage logs appear in PaperCut once PaperCut is installed and configured correctly. If you want to enforce [[http://papercut.biz/products/quota/internet_monitoring/ | Internet Quotas]] and disable internet access for users without credit skip to the next section.

* If your logs do not contain your user names then your proxy server is not forcing users to authenticate to allow Internet access.  Configuring this is dependent on your proxy server.  For an example of how to configure this for ISA Server 2004, see Appendix 2 of the [[http://papercut.biz/products/quota/download/ | PaperCut User Guide]].
Changed lines 35-36 from:
The configuration of diffent types of proxy server is out of scope of this article.  A detailed guide to [[http://www.papercut.biz/screen_net.htm |configuring ISA Server 2004 for net quotas]] can be found in Appendix 2 of the [[http://www.papercut.biz/pcstandard_download.htm |user guide]].
to:
The configuration of diffent types of proxy server is out of scope of this article.  A detailed guide to [[http://papercut.biz/products/quota/internet_monitoring/ | configuring ISA Server 2004 for net quotas]] can be found in Appendix 2 of the [[http://papercut.biz/products/quota/download/ | user guide]].
Added lines 47-48:

''Categories:'' [[!PaperCutQuota]], [[!ProxyServers]]

Comments

Share your findings and experience with other PaperCut users. Feel free to add comments and suggestions about this Knowledge Base article. Please don't use this for support requests.

Article last modified on June 09, 2015, at 01:19 PM
Printable View   |   Article History   |   Edit Article