Authentication to Windows server for Sonicwall firewall to gain internet access

[jgadams]

I'm am not much an "IT" guy and I am needing some assistance on how to approach our "IT" guy. We are a predominantly Windows network. Our IT department has been strongly against implementing Mac systems on our network. In the time that I have been here we have purchased approximately 60 machines including half a dozen iPads.

The major issue that I am having is the authentication process just to get online. Our firewall, Sonicwall NSA 3500 running LDAP, is set up to check the authentication of the windows domain server before it will allow access. That works great for our windows logins but the Macs must open Safari then go through the authentification process in which popups must be allowed and the popup must be open for the duration of the activity. Once we quit Safari we have to go through the process once again. It is becoming old real quick. It becomes an even bigger problem for our iPad users as they have to do the same thing every time they load Safari!

Any suggestions as to how to make this work? I have spoken with an Apple engineer as to which he could not give me any suggestions.

Please help this "IT" challenged individual.
Thanks,
Jason

 

[assembled]

I'm going to guess that the Sonicwall has been setup with NTLM authentication, which while working well for Windows clients, isn't brilliant for operating systems and browsers that don't support it. I would also guess that the reason they have done this is that the firewall is using a web blocker and/or access logger, and so needs the user to authenticate.

The Windows port of Chrome has support for NTLM, but I'm not sure if the Apple one does, in any case the mac would have to be joined to the domain.

There is no solution for the iPad, one of the problems of Apples closed system...

 

[jgadams]

Thank for confirming my fears! It would be nice if they would play nice with others!

 

[assembled]

Yes, it would be nice if Apple would work with an established standard for doing "transparent" authentication...