RE: SecureNAt

Hi,
you need to disable the web proxy
http://www.microsoft.com/technet/prodtechnol/isa/2004/plan/ts_proxy_traffic.mspx#appendix-a

this should fix the problems.

Regards
John

Appendix A: Disable the Web Proxy Filter
To disable the Web Proxy filter for HTTP, do the following:

1.
In ISA Server Management, click the Firewall Policy node.

2.
On the Toolbox tab, click Protocols.

3.
Expand All Protocols, right-click HTTP, and then click Properties.

4.
Click the Parameters tab, and in Application Filters, clear Web Proxy
Filter. Then click OK.

5.
Click Apply to update the firewall policy.

Note
Requests from Web browsers (with proxy settings pointing to ISA Server)
still go through the Web Proxy filter.


--
JohnnieMac


"Lakha" wrote:

> Hi All,
> I want all the machines in our compnay go through ISA server 2004 firewall.
> I have installed ISA server 2004, disabled the default internet access rule
> (nat) and created a new network rule that routes traffic from all network to
> all networks. So as far as I can see no NATting is configured. I have created
> a new access policy rule that allows all traffic out.
>
> Routing from internal/localhost to external subnets seems to work find, but
> when I use http protocol (try to get on the internet) the ISA server NAT's
> the ip src address of the packet, and this being a private ip address 172...,
> our main corporate firewall drops the packet.
>
> All machines by microsoft's defintion will be SecureNAT clients, because
> their default gateway is set to point to the internal ip address of the ISA
> server.
> Even if i configure the client to be a webproxy client (point its browser to
> the internal ip if the isa server), or even use the Firewall Client Software
> http sessions are still NATted.
>
> So my question is this, Can you disable NATting on ISA Server 2004, all i
> want is pure routing ?.
>
> Many Thanks.
>
> --
> Lakha
.

Relevant Pages

  • RE: SecureNAt
    ... disabling the web proxy filter stops the natting ... However it now means that the ISA server cannot act as a Web Proxy Cache ... all http traffic goes directly to the destination website and does ...
    (microsoft.public.isa)
  • Re: ISA 2K with one network card
    ... You can install ISA Server in web proxy mode, ... Additionaly if you configure your router that connects to the internet to ...
    (microsoft.public.isaserver)
  • Re: ISA 2K with one network card
    ... You can install ISA Server in web proxy mode, ... Additionaly if you configure your router that connects to the internet to ...
    (microsoft.public.isa.configuration)
  • RE: SecureNAt
    ... I haven't done much with sinle adaptor ISA server. ... "Lakha" wrote: ... > Many thanks for your help, disabling the web proxy filter stops the natting ... > However it now means that the ISA server cannot act as a Web Proxy Cache ...
    (microsoft.public.isa)
  • Re: problem with windows 2000 server
    ... ISA Server 2000 computer is able to access the Internet ... either via web proxy service being properly configured as a web proxy client ...
    (microsoft.public.isa)
Loading