Re: ISA 2004 FWC + Single Nic Template ISA2004

The fact that you can misconfigure a product in no way creates a "working" scenario for it.
There are numerous reasons this scenario isn't supported - the largest of which are "not designed or tested to operate this way".
IOW, if you hit a problem and call for help, you'll be instructed to reconfigure your server.
--
--
Jim Harrison [ISA SE]
Read the help, books and articles!

This posting is provided "AS IS" with no warranties, and confers no rights.

"Stuart" <Stuart@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:40082548-67BF-4B1F-B02D-E2A5B43B0D1F@xxxxxxxxxxxxxxxx
Then why does it work ?

We have a test ISA2004 W2K3 box running on a MS Virtual PC. Using a default
install of ISA2004 box with the single NIC template applied.

Agreed, the FWC will not work in this configuration because the Single NIC
template defines "Internal" as all IP's (well, almost all)... However, if you
modify the "Internal" network set to only include the IP's that are actually
local to your network, it correctly directs traffic (admittidly we've only
tested with web traffic so far, HTTP, HTTPS), external to the network, to the
ISA box (which in turn passes this request to the Internet).

It performs authentication for applications that don't understand
Intergrated authentication and can deny/allow specific applications from
being directed to the ISA server.

So, does the FWC provide some other functionality (apart from directing
network traffic) that is unsupported in a single NIC configuration?



"Jens Baier" wrote:

Hi,

Why are Firewall clients not supported in an isa2004 single Nic setup?

Single NIC = only HTTP/HTTPS/FTP-DL = Webproxy Client
Firewall Client = Winsock Client - Single NIC ISA = No Winsock Support.

regards Jens
www.nt-faq.de





.

Relevant Pages

  • Re: Can someone confirm which configuration is best?
    ... is an "extra" rule which is ready to support any personal website. ... whether it's on the SBServer or on another machine in your network. ... Restart the ISA Services using the ISA MMC ... On the same SBServer LAN IP address, but with a unique Host Header. ...
    (microsoft.public.windows.server.sbs)
  • RE: Random disconnection
    ... For your scenario, you have to monitor the network ... Support incident with Microsoft Support Services, ... Press and hold down the F8 until the Windows Startup ...
    (microsoft.public.windowsxp.perform_maintain)
  • RE: Enabling LCS 2005 Voice Communication Through ISA 2004
    ... my understanding of your network structure is as ... You had published the SIP on the ISA 2004 server and a cient ... This issue is when a client computer connect to from Internet is a VoIP ... Microsoft Online Partner Support ...
    (microsoft.public.isa)
  • Re: Publish behind another internal firewall
    ... Now, if the Linux box would be in place of your ISA Server, then this would be a usual FW -> ISA Publishing scenario, but as you describe it, I doubt it. ... linux router in another network 10.0.0.X and this one have a remote conection ...
    (microsoft.public.isa.publishing)
  • Re: IP Address of web clients
    ... The next release of ISA will support this scenario. ... > web site are recording the client's IP Address as being ...
    (microsoft.public.windows.server.sbs)