Re: ISA 2004 FW clients

From: Jim Harrison [MSFT] (jmharr_at_online.microsoft.com)
Date: 12/14/04 

Date: Tue, 14 Dec 2004 09:20:46 -0800

That's an interesting overgeneralization, but fortunately untrue in this case.
What frequently occurs (and appears to be the case here) is that the FWC is configured to use a particular ISA server instead of
using "automatically detect"
When it's configured this way, it can't self-disable and actually blocks traffic (secure by default, y'see).
If the FWC is configured to use wpad as I described earlier in this thread, the FWC will self-disable when no ISA can be detected. 

-- 
 Jim Harrison [ISASE]
 Read the help, books and articles!
 This posting is provided "AS IS" with no warranties, and confers no rights.
"Cyskon" <cyskon@msn.com> wrote in message news:OVnUOGa2EHA.4028@TK2MSFTNGP15.phx.gbl...
I would like to state that the reason that it worked was because I was
using Firefox. With IE, I was unable to browse until I disabled the
proxy information. So I guess Microsoft applications don't work well
with each other.
Switch to Firefox.
Cyskon wrote:
>Chad,
>
>I installed the FwC on my laptop and browsed through my network using it,
>then I just right-clicked on the icon in the system tray and disable it,
>then disconnected from my network and used my GPRS card and browsed the
>internet quite nicely, no additional configuration or changes.
>
>Maybe I got lucky :).
>
>"Chad Wickenheiser" <chadw01@hotmail.com> wrote in message
>news:5aa5f047.0411172055.207e19ae@posting.google.com...
>
>
>>Why would I complicate things by using WPAD entries and manipulating
>>DNS and DHCP if the backup option if an ISA server is not found, is to
>>use a direct connection anyways?
>>
>>I just figured the client would be intuitive enough to know that if it
>>is disabled, the proxy settings should be disabled correspondingly.
>>
>>I could write a batch file that would stop the Firewall client agent
>>service and use a .reg file to clear the proxy settings - but I didn't
>>really want to go this way, if I could help it.
>>
>>"Jim Harrison [MSFT]" <jmharr@online.microsoft.com> wrote in message
>>
>>
>news:<uFpvzUMzEHA.1860@TK2MSFTNGP15.phx.gbl>...
>
>
>>>This is what the setting "automatically detect" is for.
>>>If you can provide wpad support in your network, your customers will use
>>>
>>>
>your ISA and when they get home, they'll use their ISP in
>
>
>>>"direct" mode.
>>>The ISA help and several KB articles and isaserver.org articles offer
>>>
>>>
>many ways to accomplish this.
>
>
>>>In all places, the keyword is "wpad".
>>>
>>>--
>>> Jim Harrison [ISASE]
>>> Read the help, books and articles!
>>>
>>> This posting is provided "AS IS" with no warranties, and confers no
>>>
>>>
>rights.
>
>
>>>"Chad Wickenheiser" <chadw01@hotmail.com> wrote in message
>>>
>>>
>news:5aa5f047.0411170718.617fc6f1@posting.google.com...
>
>
>>>Why is it that when you disable the Firewall client, that the proxy
>>>settings in IE are not disabled also?  Do users always have to
>>>manually disable their own proxy settings (i.e. for laptop users
>>>wishing to access their own ISP from home)?
>>>
>>>Thanks.
>>>
>>>
>
>
>
>

Relevant Pages

  • Re: VPN PPTP problem
    ... The ISA Info which I gathered from you before including all ISA ... So I had checked your ISA configuration at the beginning. ... suppose the firebox will show you a PPTP service to publish. ... Click Virtual Private Network connection, ...
    (microsoft.public.windows.server.sbs)
  • Re: SBS R2 ISA2004 Dark Arts
    ... ISA in SBS as intended or you'll get into trouble. ... I have to get the back firewall configuration to work with the ... network in the rules/policies. ...
    (microsoft.public.windows.server.sbs)
  • RE: ISA Server failed to load the firewall policy configuration.
    ... registry then try to start ISA console. ... about MS Firewall service. ... ISA Server failed to load the firewall policy configuration. ... The Web filter Web Publishing Load Balancing Filter/Web filter ...
    (microsoft.public.isa.configuration)
  • Re: general question on design options
    ... I'm running the configuration that you are considering. ... Behind that I have my ISA, ... How do you get the VPN connections that terminate on the Cisco to get past ... DMZ and not the LAN. ...
    (microsoft.public.isa)
  • ISA Server configuration agent was unable to upload the configuration
    ... firewall and proxy, no firewall client installed on clients, two nodes, each ... Today I started getting these alerts in the ISA log (didn't notice until I ... The ISA Server configuration agent was unable to upload the configuration to ...
    (microsoft.public.isa.enterprise)
Loading