Re: Multiple Outbound listeners with different IPs

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

You haven't indicated why you need different auth methods.
Does the shared app impose this limitation?

--
Jim Harrison (ISA SE)

This posting implies no warranty and confers no rights.
http://catb.org/~esr/faqs/smart-questions.html



"Mankney" <Mankney@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:89AF6DB3-BDCF-48A0-A2BE-C711454441A1@xxxxxxxxxxxxxxxx
Can anyone think of how something like this may be accomplished with the ISA
2006?

Basically, all users but one gain Internet Access by using Integrated
authentication. We can deny specific users by putting them in a group.

A large group of users in the plant log in with one user name called
shipping. This user called shipping is denied Internet access by an access
rule that uses an active directory group for members. A handful of people
who
need to log in under the shipping login name must access the Internet.

Any ideas would be appreciated on how this can be accomplished.

Thanks

"Mankney" wrote:

Hi, I am having an issue configuring outbound Internet Access for ISA
2006.
On our old ISA 2000 server we had 2 outgoing listeners with different IPs
set
up with different authentication. One address was for Integrated and the
other was for Basic. We could then force certain people to type in
credentials before they used the Internet. No one is using the firewall
client.


The question I have is how to do the same thing in 2006. I have outbound
access set up but I don't know how to have different internal addresses
use
different authentication methods. Please help. Any help is appreciated.

I cannot find any documentation on this. The main issue right now is I
can't
get the system to ask for credentials when opening up Internet Explorer
plus
the whole thing of using multiple IPs with different authentication
methods.

Thanks for any help in advance.

.

Relevant Pages

  • Re: Proxy Authentication
    ... still learning ISA and how to fully leverage it...the setting that you ... I do have a rule for internet access, where by certain groups and users are ... where I was mentioning the "admin" thing. ... > confusing the "per proxy listener" authentication (the option I am talking ...
    (microsoft.public.isa)
  • RE: anonymous access rule and authetication rule
    ... the group access since it would evalute the "all users" rule first? ... Sorry, I love the ISA server, but still failry new with it. ... require authentication to fullfill your needs. ... I am trying to setup rules that will allow all users access to the internet ...
    (microsoft.public.isaserver)
  • RE: anonymous access rule and authetication rule
    ... Sorry, I love the ISA server, but still failry new with it. ... require authentication to fullfill your needs. ... I am trying to setup rules that will allow all users access to the internet ...
    (microsoft.public.isaserver)
  • RE: anonymous access rule and authetication rule
    ... Sorry, I love the ISA server, but still failry new with it. ... require authentication to fullfill your needs. ... I am trying to setup rules that will allow all users access to the internet ...
    (microsoft.public.isaserver)
  • Re: ISA 2004 & IE Authentication
    ... Your ISA has some rules filtering by content-type? ... disabling it for a while.. ... > is asking for authentication every time they open the IE. Advice please ... Internet users are members in AD group. ...
    (microsoft.public.isa.clients)