Home > Ask the Security Experts > Identity Management and Access Control Questions & Answers > Users can no longer reach any Microsoft login site. Any ideas?
Ask The Security Expert: Questions & Answers
EMAIL THIS

Users can no longer reach any Microsoft login site. Any ideas?

Joel Dubin, past SearchSecurity.com expert EXPERT RESPONSE FROM: Joel Dubin, past SearchSecurity.com expert

Pose a Question
Other Security Categories
Meet all Security Experts
Become an Expert for this site


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


>
QUESTION POSED ON: 17 June 2008
We've had a number of users complain that they can no longer reach their Hotmail site from work or any other login site belonging to Microsoft. This has been happening for about a week. The symptom is to get to the login page, enter the credentials and wait, wait ... no errors, no BSOD, no 404, nothing. It is somewhat strange because the users can take the same laptop that failed access from the office net and successfully log in from home or elsewhere outside the office. Any ideas?


BROWSE BY TAG
Identity Management and Access Control,   Web Authentication and Access Control,   Enterprise Identity and Access Management,   Network Security: Tools, Products, Software,   Network Firewalls, Routers and Switches,   Enterprise Network Security,   Expert Archive: Identity Management and Access Control,   VIEW ALL TAGS

Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


RELATED CONTENT
Identity Management and Access Control
Learn about enterprise strategy for server virtualization single sign-on
Employee information security awareness training for new IAM systems
Can you combine RFID tag technology with GPS to track stolen goods?
Is there a free enterprise-caliber password-management tool?
Cryptosystem attacks that do not involve obtaining the decryption key
Can any firm or organization get a digital signature certificate?
Should the CTO have domain administrator access?
Does password sharing in international branches violate SOX?
What are best practices for secure password distribution after a data breach?
Is it possible to encrypt CDs and DVDs as well as SD cards?

Web Authentication and Access Control
Changing times for identity management
How to use single sign-on for Web access control to prevent malware
IBM USB banking device stops keyloggers, malware
Can mutual authentication beat phishing or man-in-the-middle attacks?
Could someone place a rootkit on an internal network through a router?
Sun launches open source OpenSSO for identity management
Should a new user have to confirm an email address to gain access?
Shared Identity Providers Could Soothe Password Chaos
Vista WIL: How to take control of data integrity levels
Video: Changes ahead for MIT Kerberos Consortium

Network Firewalls, Routers and Switches
Firewall rule management best practices
Should enterprises be running multiple firewalls?
What are the disadvantages of proxy-based firewalls?
IT pros find corporate firewall rules tough to navigate
PCI compliance requirement 1: Firewalls
Comparing an application proxy firewall and a gateway server firewall
Microsoft Threat Management Gateway has some drawbacks
Rising Profile
Front-end/back-end firewalls vs. chassis-based firewalls
How to configure a firewall to communicate with an upstream router

RELATED GLOSSARY TERMS
Terms from Whatis.com − the technology online dictionary
access log  (SearchSecurity.com)
anonymous Web surfing  (SearchSecurity.com)
authentication, authorization, and accounting  (SearchSecurity.com)
identity chaos  (SearchSecurity.com)
knowledge-based authentication  (SearchSecurity.com)
multifactor authentication (MFA)  (SearchSecurity.com)
walled garden  (SearchSecurity.com)

RELATED RESOURCES
2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
Search Bitpipe.com for the latest white papers and business webcasts
Whatis.com, the online computer dictionary


The company is probably using some sort of proxy in the office that blocks access to certain websites. Once someone leaves the office with his or her laptop, he or she is connecting directly to the Internet without a proxy, and is home free.

Proxies like those offered by vendors Blue Coat Systems Inc. and Websense Inc. are used by companies to restrict access to the Web by both preventing employees from going to inappropriate sites and blocking them from inadvertently downloading malware. These products frequently are configured to block access to personal webmail like Hotmail, Yahoo and Google, which are often a source of malware. Companies also block personal email to prevent data leakage from employees that might try, either maliciously or inadvertently, to send out sensitive customer information or proprietary information.

Proxies usually come with a set of default configurations for blocking things like pornography or gambling, but can also be manually configured to include sites a company might deem as time wasters, such as shopping and social networking sites.

Usually, companies have written policies detailing what is appropriate Web usage; such a policy should be clearly communicated to employees with an explanation that all Web traffic is monitored by proxies.

What's odd is that login sites from Microsoft seem to be affected. But there is a pattern here. Since Hotmail is offered by MSN, a Microsoft product, it can be accessed with a Passport or Windows Live ID account, both also offered by Microsoft.

It's possible that the proxy configurations are blocking Passport, Live ID or other Microsoft single-sign on (SSO) IDs, which would block not only Hotmail but also any other Microsoft login. In an effort to block access to personal email, logins to Microsoft sites may have inadvertently been blocked, too.

First, check if the company is using a proxy product for restricting Web and webmail access, then check the settings to make sure Windows SSO products aren't being blocked as well.

More information:




Search and Browse the Expert Answer Center
Search and browse more than 25,000 question and answer pairs from more than 250 TechTarget industry experts.
Browse our Expert Advice



Find Security Solutions for Your Business
Targeted Security Channel Tips for Resellers, Integrators and Consultants
TechTarget Security Media
Information Security View this month\\'s issue and subscribe today.
Information Security Decisions Apply online for free conference admission.
SearchSecurity.com
HomeNewsMagazineMultimediaWhite PapersLearningAdviceTopicsEventsAbout Us

About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.

TechTarget Corporate Web Site  |  Media Kits  |  Site Map




All Rights Reserved, Copyright 2003 - 2009, TechTarget | Read our Privacy Policy
  TechTarget - The IT Media ROI Experts