Clarifications req. Jim Harrison description of ISA clients (isaserver.org)

From: Tony Su (anonymous_at_discussions.microsoft.com)
Date: 04/10/04 

Date: Sat, 10 Apr 2004 10:36:33 -0700

[Reference article]
http://www.isaserver.org/tutorials/ISA_Clients__Part_3_The_
Firewall_Client.html

>>Configuring PASV FTP to to the ISA box:
The FW Proxy client is described as the only client which
supports secondary connections.

When an ISA box needs to support PASV FTP to itself, what
is the recommended configuration since it's not
recommended to install the FW client on the ISA box and
configuring as a Web Proxy is not an option?

>>Name Resolution:
FW Clients "always resolve unqualified names without using
the ISA Server firewall service." Is this saying that when
a connection is as a

FW Client-
FQDN - ISA DNS cache
UnFQDN - Windows DNS (or hosts file or broadcasts)

SNAT Client-
FQDN - Windows DNS
UnFQDN - Windows DNS

Web Proxy Client-
FQDN - ISA DNS cache
UnFQDN - Windows DNS (or hosts file or broadcasts)

[Reference article]
http://www.isaserver.org/tutorials/ISA_Clients__Part_2_Secu
reNAT_and_Web_Proxy_Client.html

>>Confirming autodetection on port 80:
Somewhere I thought I read that autodetection occurs on
port 80, and there has been some question about whether
that can conflict with IIS on the ISA box also deploying a
website on its primary LAN IP address on port 80. Although
I haven't seen a conflict, it seems that both IIS and ISA
should not be both listening on the same IP address and
port.

>>Bypass Proxy for local servers:
On SBS2K networks, not a single network has successfully
supported this setting. In all cases, Web Proxy
configurations had to be disabled to force a connection
directly with the website and has been necessary whenever
there were ISA Web Proxy Service problems. Is there a
recommended troubleshooting procedure or widely known mis-
configuration?

TIA,
Tony Su

Relevant Pages

  • Re: Migrate then Setup or Setup then Migrate?
    ... The term "transparent proxy" is a specific term with a specifi meaning. ... Clients by either installing the Firewall Client Software ... See the ISA documentation or the built in Help for the details of the three ... Microsoft Internet Security & Acceleration Server: ...
    (microsoft.public.isa.configuration)
  • Re: IE 6 and Proxy Setting Exceptions
    ... IE 6 and Proxy Setting Exceptions ... | searched on the TechNet DVD for this "Internal Client Concepts in ISA ... | ProgramName.EXE Disable/DisableEx 1 ...
    (microsoft.public.isa)
  • Re: HTTPS; SSL-Tunnel
    ... ISA resolves names for browsers configured as web proxy clients, so if the browser is complaining about "DNS Failure", it's likely ... Original Client IP Client Agent Authenticated Client Service Server Name ...
    (microsoft.public.isa)
  • Re: Webproxy Konfiguration auf einem ISA 2006 Standard
    ... dann ist der Client noch SecureNAT Client?! ... Dann geht es auch ohne Proxy ... Hierbei habe ich die einzelne IP als Quelle angegeben und den ISA ... Freigegeben sind Port 80/443/8080. ...
    (microsoft.public.de.german.isaserver)
  • Re: ISA server 2004 and Bluecoat proxy
    ... i want to mention that we have configured a backup rout (backup bluecoat ... i want to ask about event 14130 that related to web proxy chain fauilire. ... If you were able to work around the upstream proxy server, ... upstream ISA Server, you might want to change it back. ...
    (microsoft.public.isa.configuration)
Loading