Re: blocking browsers accessing web proxy service

From: Jim Harrison [MSFT] (jmharr_at_online.microsoft.com)
Date: 07/07/04

  • Next message: Thomas: "Silent Uninstall ISA Client Firewall"
    Date: Wed, 7 Jul 2004 11:47:56 -0700
    
    

    Is this ISA 2000 or ISA 2004?
    The process is different for each...

    -- 
     Jim Harrison [ISASE]
     Read the help, books and articles!
     This posting is provided "AS IS" with no warranties, and confers no rights.
    "Srinivas Acharya" <anonymous@discussions.microsoft.com> wrote in message news:2820b01c46423$d1b74b60$a401280a@phx.gbl...
    Hi,
    Thanks for your time and valuable comments. It is really
    interesting. I don't know how to edit Outgoing Web Requests
    listener. I got some idea in the net that I have to edit
    some files. I will try. Meantime if you let me know it will
    save me lot of time.
    Thanks in advance.
    Regards,
    Srinivas Acharya
    >-----Original Message-----
    >Yes; you can edit the Outgoing Web Requests listener to
    "Listen on selected IPs" and choose only "127.0.0.1".
    >This will allow only traffic from IE on  the ISA itself or
    from the HTTP Redirector to pass through the web proxy service.
    >-- 
    > Jim Harrison [ISASE]
    > Read the help, books and articles!
    >
    > This posting is provided "AS IS" with no warranties, and
    confers no rights.
    >
    >
    >"srinivas Acharya" <anonymous@discussions.microsoft.com>
    wrote in message
    news:2669001c46321$780a2d60$a601280a@phx.gbl...
    >Hi,
    >Thanks for your valuable comments. We don't have domain
    >here, that is the problem. For me to implement domain, it
    >takes sometime.
    >I have Windows NT clients and windows 2000 clients
    >connected in workgroup.
    >
    >Is it possible now to achieve my requirement?..
    >
    >Regards,
    >Srinivas Acharya
    >>-----Original Message-----
    >>I understood you; I was asking you why you want to force
    >yourself into this particular corner?
    >>Can you explain why you feel the need to create this
    >policy?
    >>
    >>If the users are local admins on those machines, then you
    >have very little control over what they do.
    >>If not, and you also have a domain environment, you can
    >use either logon scripts or security policies to make sure
    >their settings
    >>are as you want them to be.
    >>Also, you can set the IE proxy settings and policies in
    >the registry.  http://www.isatools.org/ie_proxy.vbs is one
    >example.
    >>
    >>-- 
    >> Jim Harrison [ISASE]
    >> Read the help, books and articles!
    >>
    >> This posting is provided "AS IS" with no warranties, and
    >confers no rights.
    >>
    >>
    >>"Srinivas Acharya" <anonymous@discussions.microsoft.com>
    >wrote in message news:2646e01c46252$60742040
    >$a501280a@phx.gbl...
    >>Hi,
    >>Thanks for replying. But I didn't get you.
    >>I think you have not understood my question. I don't want
    >>anybody to use webproxy service by configuring in IE. I
    >>want everyone to access the net through firewall client
    >>only. Meantime I want request from firewall client to be
    >>forwarded to webroxy since it does caching and gives
    >>detailed report.
    >>Hence I want to run webproxy service but i don't want
    >>anybody to access the webproxy service directly. I want
    >>everyone to access the webproxy service via firewall
    >client.
    >>
    >>is it possible to that?..
    >>
    >>Regards,
    >>Srinivas Acharya
    >>
    >>>-----Original Message-----
    >>>Let them configure the browser if they want; you still
    >get
    >>the same controls from the web proxy service.
    >>>
    >>>-- 
    >>> Jim Harrison [ISASE]
    >>> Read the help, books and articles!
    >>>
    >>> This posting is provided "AS IS" with no warranties, and
    >>confers no rights.
    >>>
    >>>
    >>>"Srinivas Acharya" <anonymous@discussions.microsoft.com>
    >>wrote in message
    >>news:24a3d01c46029$206fa5d0$a601280a@phx.gbl...
    >>>Hi All,
    >>>I don't want anybody in the LAN accessing internet by
    >>>simply configuring server name and port 8080. I want to
    >>>avoid this.
    >>>I want all to use firewall client and access the net via
    >>>web proxy with the help of http filter. I can configure
    >>>firewall  service to bypass webproxy but there will not
    >be
    >>>caching and i can't stop download of exe and mp3 files.
    >For
    >>>this webproxy service must run. If I run webproxy, it is
    >>>very to access the  net by giving proxy settings in IE.
    >>>
    >>>Please suggest me some solution for this problem.
    >>>
    >>>Regards,
    >>>Srinivas Acharya
    >>>
    >>>
    >>>.
    >>>
    >>
    >>
    >>.
    >>
    >
    >
    >.
    > 
    

  • Next message: Thomas: "Silent Uninstall ISA Client Firewall"

    Relevant Pages


    Loading