Additionally, see the "More Information" section for details about how to enable SecurID authentication in ISA Server.
During the SecurID authentication process, you request a URL that includes white space, and ISA Server responds with the SecurID logon page. This page prompts you for authentication credentials. See the "More Information" section for examples of when this problem might occur.
This problem does not occur if the following conditions are true:
During the SecurID authentication process, you request a URL that does not include white space.
You request a URL that includes white space after the ISA Server SecurID logon has successfully authenticated your credentials and before the SecurID logon page prompts you to enter your credentials for re-authentication.
This is a problem in the SecurID Web filter in ISA Server 2000. If you request a URL during the SecureID authentication process, and the URL contains white space, the Web filter does not correctly encode or decode the white space.
To resolve this problem, obtain the latest service pack for ISA Server 2000.
For additional information, click the following article number to view the article in the Microsoft Knowledge Base:
313139 How to obtain the latest Internet Security and Acceleration Server 2000 service pack
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.
This problem was corrected in ISA 2000 Service Pack 2.
This problem may occur in the following circumstances:
You publish an internal Outlook Web Access (OWA) Server by using ISA Server Web publishing.
You enable SecurID authentication in the appropriate Web publishing rule.
You configure a SecurID cookie time-out value in the SecurID settings of the Web publishing rule. (The default time-out value is 15 minutes.)
You are successfully authenticated to the OWA site by the SecurID logon page.
You open e-mail on the OWA page after the ISA Server RSA cookie time-out has passed, and ISA Server responds with the SecurID logon page that prompts you to re-authenticate.
The e-mail that you open includes white space in the subject line. For example, if the subject line contains the "Test over Outlook" string, you may see a URL that is similar to the following after the browser has normalized the URL: