Re: ISA 2004 FW clients

From: Jim Harrison [MSFT] (jmharr_at_online.microsoft.com)
Date: 12/22/04

  • Next message: Mohammed A. Raslan: "Re: Firewall client and authentication"
    Date: Wed, 22 Dec 2004 07:32:27 -0800
    
    

    You don't need to set up another service in the network.
    If the FWC is set to "automatic", then it won't interfere.
    It's an option, y'see.

    -- 
     Jim Harrison [ISASE]
     Read the help, books and articles!
     This posting is provided "AS IS" with no warranties, and confers no rights.
    "Cyskon" <cyskon@msn.com> wrote in message news:u3xSq%23u4EHA.3876@TK2MSFTNGP10.phx.gbl...
    Interesting, I understand exactly what you're saying. But why is MS forcing
    us to have to setup some other service on our network, just to get the FWC
    to simply "release" the request once it can't locate the ISA server. Why
    must they be so "difficult" in their reasoning?
    "Jim Harrison [MSFT]" <jmharr@online.microsoft.com> wrote in message
    news:OM3K6Eg4EHA.4028@TK2MSFTNGP15.phx.gbl...
    > That's an interesting overgeneralization, but fortunately untrue in this
    case.
    > What frequently occurs (and appears to be the case here) is that the FWC
    is configured to use a particular ISA server instead of
    > using "automatically detect"
    > When it's configured this way, it can't self-disable and actually blocks
    traffic (secure by default, y'see).
    > If the FWC is configured to use wpad as I described earlier in this
    thread, the FWC will self-disable when no ISA can be detected.
    >
    > --
    >  Jim Harrison [ISASE]
    >  Read the help, books and articles!
    >
    >  This posting is provided "AS IS" with no warranties, and confers no
    rights.
    >
    >
    > "Cyskon" <cyskon@msn.com> wrote in message
    news:OVnUOGa2EHA.4028@TK2MSFTNGP15.phx.gbl...
    > I would like to state that the reason that it worked was because I was
    > using Firefox. With IE, I was unable to browse until I disabled the
    > proxy information. So I guess Microsoft applications don't work well
    > with each other.
    >
    > Switch to Firefox.
    >
    > Cyskon wrote:
    >
    > >Chad,
    > >
    > >I installed the FwC on my laptop and browsed through my network using it,
    > >then I just right-clicked on the icon in the system tray and disable it,
    > >then disconnected from my network and used my GPRS card and browsed the
    > >internet quite nicely, no additional configuration or changes.
    > >
    > >Maybe I got lucky :).
    > >
    > >"Chad Wickenheiser" <chadw01@hotmail.com> wrote in message
    > >news:5aa5f047.0411172055.207e19ae@posting.google.com...
    > >
    > >
    > >>Why would I complicate things by using WPAD entries and manipulating
    > >>DNS and DHCP if the backup option if an ISA server is not found, is to
    > >>use a direct connection anyways?
    > >>
    > >>I just figured the client would be intuitive enough to know that if it
    > >>is disabled, the proxy settings should be disabled correspondingly.
    > >>
    > >>I could write a batch file that would stop the Firewall client agent
    > >>service and use a .reg file to clear the proxy settings - but I didn't
    > >>really want to go this way, if I could help it.
    > >>
    > >>"Jim Harrison [MSFT]" <jmharr@online.microsoft.com> wrote in message
    > >>
    > >>
    > >news:<uFpvzUMzEHA.1860@TK2MSFTNGP15.phx.gbl>...
    > >
    > >
    > >>>This is what the setting "automatically detect" is for.
    > >>>If you can provide wpad support in your network, your customers will
    use
    > >>>
    > >>>
    > >your ISA and when they get home, they'll use their ISP in
    > >
    > >
    > >>>"direct" mode.
    > >>>The ISA help and several KB articles and isaserver.org articles offer
    > >>>
    > >>>
    > >many ways to accomplish this.
    > >
    > >
    > >>>In all places, the keyword is "wpad".
    > >>>
    > >>>--
    > >>> Jim Harrison [ISASE]
    > >>> Read the help, books and articles!
    > >>>
    > >>> This posting is provided "AS IS" with no warranties, and confers no
    > >>>
    > >>>
    > >rights.
    > >
    > >
    > >>>"Chad Wickenheiser" <chadw01@hotmail.com> wrote in message
    > >>>
    > >>>
    > >news:5aa5f047.0411170718.617fc6f1@posting.google.com...
    > >
    > >
    > >>>Why is it that when you disable the Firewall client, that the proxy
    > >>>settings in IE are not disabled also?  Do users always have to
    > >>>manually disable their own proxy settings (i.e. for laptop users
    > >>>wishing to access their own ISP from home)?
    > >>>
    > >>>Thanks.
    > >>>
    > >>>
    > >
    > >
    > >
    > >
    >
    >
    

  • Next message: Mohammed A. Raslan: "Re: Firewall client and authentication"

    Relevant Pages

    • Re: ISA 2004 FW clients
      ... us to have to setup some other service on our network, just to get the FWC ... to simply "release" the request once it can't locate the ISA server. ... no additional configuration or changes. ...
      (microsoft.public.isa.clients)
    • Re: Remote offices - How to VPN link them
      ... Read the help, books and articles! ... > to connect to my work network, which is behind an ISA server. ... > connect these remote home networks to the main network behind the ISA ... THe IP Phones need to reach the DHCP server on the ...
      (microsoft.public.isa.vpn)
    • Cannot Use LAN IP Addresses
      ... My test workstations that I have installed the FWC on ... cannot access other machines on the network using their IP address. ... I have a few web servers within my network that I access at times using the ...
      (microsoft.public.isa.vpn)
    • Cannot Use LAN IP Addresses
      ... My test workstations that I have installed the FWC on ... cannot access other machines on the network using their IP address. ... I have a few web servers within my network that I access at times using the ...
      (microsoft.public.isa.clients)

    Loading