Re: ISA 2000 Firewall Log

Andrew,

Just so that I'm clear about this firewall issue.

If I only allow http traffic through my ISA server, and a 3rd party
application requires internet access for whatever reason on a port other than
port 80 or if it uses port 80 it isn't able to detect and use the IE proxy
config, it will try to get access to the internet but ISA will reject it
because this 3rd party program doesn't know there is a proxy on the network
and fail. It will then try to get out using the firewall service (Where I'm
seeing workstations appear in the log) but this doesn't mean that it's
actually getting internet access, correct? If this is correct how do I know
that a program is actually being blocked if it shows up in the firewall log?

Once again, Thanks for your advice,
Mike

"Andrew Klimkin" wrote:

> > MY Http Redirector filter is enabled and set to Reject HTTP requests from
> > Firewall and SecureNat Clients. Should this deny any non http request from
> > getting to the internet?
> No. HTTP Redirector filter has nothing to do with any non-HTTP traffic. But
> it is effectively prevents HTTP connections from snat and firewall clients
> via firewall service.
> You control any non-HTTP connections with ISA Protocol Rules.
>
> Regards,
> Andrew
>
>
>
.

Relevant Pages

  • ISA 2004: neue Funktion Route ist doch NAT? die 2te
    ... dann ist ISA nur noch Firewall und dann kommt ... Also habe ich eine Policy mit HTTP und aktiviertem Webproxyfilter erstellt. ...
    (microsoft.public.de.german.isaserver)
  • Re: ISA 2000 Firewall Log
    ... > application requires internet access for whatever reason on a port other ... The firewall log entries appears because the traffic from the snat clients ... rejected by HTTP redirector filter should appear in firewall logs and how do ... MS ISA Server 2000 Firewall and Web Proxy log fields: ...
    (microsoft.public.isa)
  • Re: Block All and Allow as We Go
    ... ISA not currently installed on my server, so as I said...was trying to ... SBS Internet Access rule is what allows clients to use HTTP (and other ...
    (microsoft.public.windows.server.sbs)
  • Re: Long QueryString Problem with 2004
    ... Right click on your firewall rule accourding the internet access, ... http and define there the options. ... > the ISA HTTP filter. ...
    (microsoft.public.isaserver)
  • Re: Web access from ISA Server
    ... have alot of experience with ISA. ... go about configuring that rule? ... >You have to allow outbound HTTP, ... >> workstations behind the firewall. ...
    (microsoft.public.isaserver)