Re: Firewall client not working but its session is visible in ISA-



You can't use the Firewall Client on a single homed ISA.

The features and limitations of a single-homed ISA Server 2004 computer
http://support.microsoft.com/kb/838364/en-us
http://www.microsoft.com/technet/prodtechnol/isa/2004/plan/single_adapter.mspx

Things may seem to be working when "nothing changed on the ISA" because
things are messed up to the point that the Clients are not trying to use the
proxy and are going direct,...which the "firewall appliance" is perfectly
happy to do if you never configured it to only allow outbound HTTP/HTTPS
from the ISA's IP# only.

--
Phillip Windell
www.wandtv.com

The views expressed, are my own and not those of my employer, or Microsoft,
or anyone else associated with me, including my cats.
-----------------------------------------------------

"Boein" <Boein@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:7B82EF50-825A-459F-9794-602697D0FCB9@xxxxxxxxxxxxxxxx
Hi Jim,

The Isa server is installed on a unihomed computer. The server has a
single
nic connected to our lan. It is not installed as a firewall because we
use
our own firewall appliance. The isa server only filers internet traffic
and
sends it to the firewall. Anyway the problem seems to have gone, out of
the
blue the fw-client worked again. I'm wondering if we could have switching
problems in our network, becauses nothing changed in the Isa
configuration.

Kind regards,
Boein



"Jim Harrison (ISA SE)" wrote:

"configured it to work as a proxy-server" is less meaningful than it
sounds.
is this ISA deployed on a single- or multi-homed machine?

--
Jim Harrison (ISA SE)

This posting implies no warranty and confers no rights.
http://catb.org/~esr/faqs/smart-questions.html



"Boein" <Boein@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:D3CA7073-0875-4F48-8EFA-A163B3AAF7C2@xxxxxxxxxxxxxxxx
Hi all,
I'm running ISA Server 2006 on windows 2003 R2 and configured it to work
as
a proxy-server. When the clients connect via the browser there's no
problem.
When the clients connect via the firewall-client with proxysettings
disabled
in the ie-browser, the client cannot surf. Although, when I look in the
active sessions on the ISA-server, the client is listed there and it's
session type is "Firewall client" . I enabled firewall client support on
the
network, but are there other things I should configure to make this work?

Thanks
Boein




.



Relevant Pages

  • RE: SBS Premium, Secure Banking site, certificate = no joy
    ... firewall client installed cannot access a specific banking web site. ... settings and create the ISA rules. ... 825763 How to configure Internet access in Windows Small Business Server ... On the ISA Server computer, stop the Microsoft Firewall service. ...
    (microsoft.public.windows.server.sbs)
  • Re: CEICW fails - several errors
    ... The firewall isn't used when ISA is installed. ... On the WAN NIC of your server the DNS has to point to the LAN IP. ... I immediately checked and ISA Server ...
    (microsoft.public.windows.server.sbs)
  • RE: Force use of ISA Firewall Client
    ... the Firewall client automatically sends user credentials ... or the user account must be mirrored on the ISA 2004 firewall. ... Firewall Client will result in usernames being included in the ISA logs, ... But if you visit Websites or FTP, the web proxy has improved performance. ...
    (microsoft.public.windows.server.sbs)
  • RE: Force use of ISA Firewall Client
    ... the Firewall client automatically sends user credentials ... or the user account must be mirrored on the ISA 2004 firewall. ... But if you visit Websites or FTP, the web proxy has improved performance. ...
    (microsoft.public.windows.server.sbs)
  • RE: OWA page not displayed Outside
    ... Open ISA 2006 management console. ... Expand the server node and highlight 'Monitoring'. ... Click 'Configure Firewall Logging'. ... |> internal client as both the web proxy client and firewall client? ...
    (microsoft.public.windows.server.sbs)