Re: Deny Fireall Client Requests



OK thanks. I see if i can explain myself a little better.

I want to create a rule on the ISA servers so if someone goes and downloads
the FW client or has it installed it will deny them, which in turn forces
them to use the Web proxy settings and hopefully uninstall the FW client.

with this rule i want to allow just a few service accounts to use the FW
client.



"Phillip Windell" wrote:

"Blueman" <Blueman@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:F8E1A1EE-9BE9-49F3-9271-82B296A1A6D8@xxxxxxxxxxxxxxxx
OK thanks,

But i would like to deny the Firewall client from being used and force the
user to use Web Proxy settings in IE.

You cannot specifiy it like that.

If a machine is both a Web Proxy and a Firewall Client at the same time the
Web Proxy will take precedence when the Browser is being used because the
browser makes the decision before Winsock becomes involved.

--
Phillip Windell
www.wandtv.com

The views expressed, are my own and not those of my employer, or Microsoft,
or anyone else associated with me, including my cats.
-----------------------------------------------------
Technet Library
ISA2004
http://technet.microsoft.com/en-us/library/cc302436(TechNet.10).aspx
ISA2006
http://technet.microsoft.com/en-us/library/bb898433(TechNet.10).aspx

Understanding the ISA 2004 Access Rule Processing
http://www.isaserver.org/articles/ISA2004_AccessRules.html

Troubleshooting Client Authentication on Access Rules in ISA Server 2004
http://download.microsoft.com/download/9/1/8/918ed2d3-71d0-40ed-8e6d-fd6eeb6cfa07/ts_rules.doc

Microsoft Internet Security & Acceleration Server: Partners
http://www.microsoft.com/isaserver/partners/default.mspx

Microsoft ISA Server Partners: Partner Hardware Solutions
http://www.microsoft.com/forefront/edgesecurity/partners/hardwarepartners.mspx
-----------------------------------------------------



.



Relevant Pages

  • Re: SecureNAt
    ... the web proxy has nothing to do with the NAT / no NAT rule. ... on behalf of the client. ... Of course you can NAT or not NAT the http requests ... > However it now means that the ISA server cannot act as a Web Proxy Cache ...
    (microsoft.public.isa)
  • Re: allow specific IP full access, bypassing the ISA server
    ... Troubleshooting Client Authentication on Access Rules in ISA Server 2004 ... Microsoft Internet Security & Acceleration Server: Partners ... Microsoft ISA Server Partners: Partner Hardware Solutions ... You need to create a new Access Rule for this job. ...
    (microsoft.public.isa)
  • Re: behind ISA 2004
    ... It is possible for a Client to operate as all three types at the same time. ... Understanding the ISA 2004 Access Rule Processing ... Microsoft Internet Security & Acceleration Server: Partners ... Microsoft ISA Server Partners: Partner Hardware Solutions ...
    (microsoft.public.isa.vpn)
  • RE: Web proxy returns Error code 502 (12202)
    ... installed the firewall client and added *.sun.com to the exceptions ... For now, I will restore the ISA server settings. ... An ISA Server 2006 Web Proxy client receives error code 502 when a user ...
    (microsoft.public.isa)
  • Re: block protocol using user
    ... Microsoft Internet Security & Acceleration Server: Partners ... Microsoft ISA Server Partners: Partner Hardware Solutions ... I have my client running the firewall client. ...
    (microsoft.public.isa.configuration)