I am trying to download a file from the internet via SSIS. The problem I am running into is that no matter how I seem to run the SSIS package (BIDS, DTExec, SQL Server Agent etc) It appears to me that when SSIS uses its HTTP connection manager, it uses the anonymous login. On our network we have a firewall rule that prohibits anonyous users from access to the web. SQL server agent and SSIS service are running under a domain user that has internet access, but when I look in the ISA Firewall monitoring Logs, it shows the Client username as "anonymous". Has anyone run into this, or do you have any suggestions - aside from allowing anonymous users access through the firewall?

Hi, you need to use the HTTP Conn Manager. here is the post on how to download a file using it (the SSISish way): http://www.sqlis.com/sqlis/post/Downloading-a-file-over-HTTP-the-SSIS-way.aspx Also please search right inside this forum because there is a ton of examples on this topic.Arthur My Blog

Thanks ArthurZ, but maybe I didn't explain my issue very well. I used that exact post on Downloading-a-flie-over-HTTP-the-SSIS-way. And the code/approach works fine. my only problem is that when the package runs, SSIS uses an anonymous user to actually connect via HTTP, no matter what user is running the package. This wouldn't be an issue normally, but it's just that our firewall blocks anonymous users. When I open up the firewall to all users (in Dev lab), then the package runs fine.

Got you. How did you configure to run it?Arthur My Blog

You know, I recalled there is another way of approaching this task. It must work for you because you provide the credentials in the script itself. See this post please: http://sqlblogcasts.com/blogs/greenmtnsun/archive/2007/09/06/http-authenticatoin-download-of-file-in-ssis-to-csv-file.aspx Arthur My Blog

thanks Again. I tried this other post as well, but ran into the same issue. the Post worked great for what it is doing, and I could get it to run when turning off the firewall rule that blocks outbound traffic to unathorized users, but my problem is not passing credentials to the webpage, but the user that the firewall sees as attempting to access a given URL. I think I need to look at having my admin allow anonymous outbound attempts from the computer running SSIS, or else see if there is some other disonnect between SSIS and the computer running the firewall.

You are correct. I was about to tell you that I remember from my practice - tight firewall rules prohibited a package from accessing anything on port 80 even.Arthur My Blog

Yeah everything I've been trying is on port 80, I found this post http://www.winserverkb.com/Uwe/Forum.aspx/isa/745/ISA-Web-log-shows-anonymous that is interesting. I found that when the firewall blocks "anonymous" outbound traffic, that if I access a webpage from Internet explorer, there are two entries in the firewall log, One showing a blocked anonymous logon attempt, and another showing an allowed attempt with the domain\user name as the client logon. However, when running the SSIS package, I only see the first - blocked anonymous - logon. I'm not sure if it is IE initiating the second attempt, or the OS? either way, I'm not sure how to push that logic to the SSIS package, so looks like a firewall work-around is the way to go for now. Thanks Again ArthurZ