Re: ISA2004 blocks Google desktop?

Hi,

I think we have a few crossed wires. When I said "User authentication
required" I meant removing "All Users" and setting up Groups instead using
Windows Domain Authentication in the Access Rules. I didn't know there was a
specific setting with that exact terminology? I just used that as a sentence
to describe the authentication being a requirement for access to the internet
=).

Where is that specific setting? I cannot remember seeing it.

Anyway. Thanks for clearing that up.

Cheers,

Lara

"Phillip Windell" wrote:

> "lforbes" <lforbes@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
> news:767E769A-B6E8-4F05-A7D6-31E09B857B17@xxxxxxxxxxxxxxxx
> > Hi,
> >
> > Actually the User Authentication is the entire reason we bought ISA =).
>
> And why do you think what I said means you don't have that? The setting
> "User Authentication Required" does not mean that there is no user is forced
> to authenticate without it. What is means is that enabling that setting
> prevents any "anonymous rules" from working even if you create them and it
> means you can not have any SecureNAT Clients. But if you just don't create
> any Anoymous Rules in the first place then you whole issue never exists in
> the first place.
>
> > have hardware routers blocking pretty much everything and hardware cache
> > engines. I have three extremely useful purposes for User Domain
> > Authentication required.
>
> No. You just create the Access Rules that require User accounts and you
> will have that.
> Leave the "User Authentication Required" disabled.
>
> > 1> No outside user can bring any computer into my network and have
> Internet
> > Access. This is a great way of preventing users from accessing the
> Internet
> > without my permission. Usually the only reason they would want to hook
> their
> > computer up to my network would be internet access. As they don't have it,
> > they don't bring in their computers and risk infecting my network with
> virus'
> > etc.
>
> You just create the Access Rules that require User accounts and you will
> have that.
> Leave the "User Authentication Required" disabled. As far as infecting your
> network,...they could do that anyway. What you are doing isnt' going to
> prevent that.
>
> > 2> I can block Access to the Internet via user name. I can also allow and
> > block specific sites for certain users.
>
> I do that same thing. The setting for "User Authentication Required" doesn't
> have anything to do with it.
>
> > 3> The most important - I can track when and where users go and every
> > site/image they hit. This is extremely useful and I use it a lot to make
> sure
> > users are not going to sites they are not allowed to go.
>
> Same as previous answer.
>
> --
> Phillip Windell [MCP, MVP, CCNA]
> www.wandtv.com
> -----------------------------------------------------
> Understanding the ISA 2004 Access Rule Processing
> http://www.isaserver.org/articles/ISA2004_AccessRules.html
>
> Microsoft Internet Security & Acceleration Server: Guidance
> http://www.microsoft.com/isaserver/techinfo/Guidance/2004.asp
> http://www.microsoft.com/isaserver/techinfo/Guidance/2000.asp
>
> Microsoft Internet Security & Acceleration Server: Partners
> http://www.microsoft.com/isaserver/partners/default.asp
>
> Deployment Guidelines for ISA Server 2004 Enterprise Edition
> http://www.microsoft.com/technet/prodtechnol/isa/2004/deploy/dgisaserver.mspx
> -----------------------------------------------------
>
>
>
>
>
>
.

Relevant Pages

  • Re: Elusive Problem Relating to FTP
    ... I've found out that these are all problems relating to user authentication. ... > Clients on the internal network have unrestricted internet access, ... > having problems with them being able to upload to FTP servers. ... > When using CuteFTP 6 to try and upload, ISA log shows that an unidentified ...
    (microsoft.public.isa.configuration)
  • RE: [fw-wiz] how prevelant
    ... > novell athentication pass openly across the internet, ... > have this be the requirement to access VPN tunnel rights from ... authentication via RADIUS, LDAP, or whatever so that user authentication ...
    (Firewall-Wizards)
  • Re: User authentication
    ... > My customers usually use their workstations all together as a kind of ... > Now I want to write an application that offers a user authentication to be ... > 1) My application reads out the user list from Windows domain and offers ... This dialog does not effect the windows login but returns ...
    (microsoft.public.dotnet.general)
  • Re: adverts - blocking with firewalls
    ... >problem of advertisements on the internet. ... >their firewall I thought that their software would do this job but you have ... prompt); set the User Authentication to prompt for user name and password. ...
    (comp.security.firewalls)
  • Re: ISA Question
    ... web proxy address which is the service that handles the user authentication ... > Only my administrator account can access www from the sbs ... > belong to internet users security group, ...
    (microsoft.public.windows.server.sbs)