Re: sp2 security warning
From: Paul Breckner (anonymous_at_discussions.microsoft.com)
Date: 09/14/04
- Next message: Paul Breckner: "symantec antivirus can not auto update behind isa 2004"
- Previous message: tomding: "symantec antivirus can not auto update behind isa 2004"
- In reply to: Jim Harrison [MSFT]: "Re: sp2 security warning"
- Messages sorted by: [ date ] [ thread ]
Date: Tue, 14 Sep 2004 02:06:00 -0700
Now I got your point.
Thanks for the advice, Jim.
>-----Original Message-----
>Hi Paul,
>
>Sorry, but you're misinterpreting the purpose of ISA and
ICF.
>- ISA protects the network as a whole from the Internet-
based baddies
>- ICF protects each individual host from the baddies
that come in from behind ISA.
>They're not conflicting, but complimentary concepts that
make your "defense in depth" a bit stronger.
>
>The monitor (which neither knows nor cares about the ISA
FWC) that is providing the popup is telling you the
truth; your local
>machine firewall (ICF) is disabled.
>
>ICF is enabled by default *unless* you're in a domain
environment, then it defers to GPO for activation /
configuration.
>You should enable ICF, either manually or via GPO; then
the popup will stop bugging you.
>
>--
> Jim Harrison [ISASE]
> Read the help, books and articles!
>
> This posting is provided "AS IS" with no warranties,
and confers no rights.
>
>
>"Paul Breckner" <anonymous@discussions.microsoft.com>
wrote in message news:103501c4997b$11b5a2c0
$a501280a@phx.gbl...
>Thank you, Jim, for responding.
>Sure you are right that ISA FWC is no firewall,
>but at least it is a hint that the network which
>the client is on, is protected by a firewall
>solution already.
>So, imho, the warning is 'exaggerated'.
>
>Is there any way to turn off the warning?
>(maybe a list of known firewall applications,
> some registry keys I can modify or
> anything like that)
>
>Best Regards
>Paul
>
>
>>-----Original Message-----
>>That is incorrect.
>>The ISA FWC is NOT a firewall, it's a Winsock plug-in
>that allows your machine to negotiate complex connections
>through the ISA..
>>
>>What that popup is warning you about is that your
>Windows XP firewall (aka ICF) is not enabled.
>>The updated Windows XP help covers this in very good
>detail.
>>
>>--
>> Jim Harrison [ISASE]
>> Read the help, books and articles!
>>
>> This posting is provided "AS IS" with no warranties,
>and confers no rights.
>>
>>
>>"Paul Breckner" <anonymous@discussions.microsoft.com>
>wrote in message news:080f01c4984f$d9d52780
>$a501280a@phx.gbl...
>>I have a Windows Server 2k3 running ISA Server 2k4 on a
>>local domain and XP client boxes running the ISA
Firewall
>>Client software. Since I updated the clients to XP SP2
>>I always get a security warning in the taskbar tray area
>>(as well as the security center) saying that I don't
have
>>a firewall running on my system. This permanent visual
>>warning is distracting (and even annoying) my users, so
>>I'm wondering if I there's a way to convince the
security
>>center that ISA Firewall client IS A FIREWALL
>>(I already tried the "I have firewall software that I'll
>> monitor myself" setting in the security center
settings,
>> but unfortunately after a reboot Windows doesn't
>> remember it and starts warning again).
>>Any help appreciated.
>>
>>
>>.
>>
>
>
>.
>
- Next message: Paul Breckner: "symantec antivirus can not auto update behind isa 2004"
- Previous message: tomding: "symantec antivirus can not auto update behind isa 2004"
- In reply to: Jim Harrison [MSFT]: "Re: sp2 security warning"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
