we use the AD Self Service Plus software in our company.

We've installed the GINA client on all hosts (Laptops, Desktops...).

Also we have a firewall from CheckPoint. We manage the internet access from our users with an Active Directory group.

CheckPoint use this group to check which user can access the internet.

And here is the problem: The GINA client comes as ANONYMOUS user and does not have any rights to access the internet.

The GINA client tries to connect to some external sites. We use a Commodo certificate. The GINA client will access some servers from Comodo and other targets we can't identify.

These targets seems to be neccessary, because we got an error message that the certificate can't be verified from INternet Explorer engine. (look at screenshot in attachement)

If the client uses an unprotected network it works perfectly.

Has anyone an idea what we can do? We can't allow anonymous request in our network.

Best regards

Mark