Re: Client authentication
From: Tony Su (anonymous_at_discussions.microsoft.com)
Date: 05/22/04
- Next message: Marina Roos [SBS-MVP]: "Re: ICW firewall config failed."
- Previous message: Ron Korszo: "Re: Compatible Modem?"
- In reply to: Susan Bradley, CPA aka Ebitz SBS Rocks [MVP] : "Re: Client authentication"
- Messages sorted by: [ date ] [ thread ]
Date: Sat, 22 May 2004 13:04:05 -0700
DW,
I would not recommend opening up your firewall with open
rules. You lose contrrol over any unauthorized traffic to
the Internet... ie. spyware reporting, infected LAN
machines infecting remote networks, more. Besides, in this
situation I would guess that would probably also not solve
your problem.
I have found two configurations which might solve your
problem...
1. Force FW and Web Proxy clients while disabling SNAT
support by reconfiguring your DHCP to <not> hand out the
Default Gateway to your clients. Without a Default
Gateway, each client relies entirely on its connection to
ISA for Internet access and cannot create an independent
connection to the Internet. The idea behind this method is
to permit only specified authenticated sessions.
2. Create Client Sets which contain your network's IP
addresses and re-configure your Site&Content and Protocol
rules to point to the Client Set instead of the Internet
Users group. You lose the ability to identify the Windows
User associated with traffic in your logs and access is by
machine instead of by User using this method. The idea
behind this method is that by not using Username/Password
authentication, ISA won't prompt for it.
HTH,
Tony Su
>-----Original Message-----
>ISA 2000 and do you have egress filtering on and you
didn't have it on
>in SBS 2000?
>
>go to www.smallbizserver.net and find the entry about
Quickbooks and ISA
>and either open up all/all/all or do a rule set.
>
>DW wrote:
>
>> Hi all,
>> I have a client who needs to download a lot of media
files.When using
>> SBS2000 and dowloading windows media files from the
internet, there was no
>> problem.
>> Now with SBS2003, client machines are being asked for
proxy authentication.
>> Not all the time but 90%.
>> Client machines are setup as Firewall clients.
>>
>> Any suggestions?
>>
>> Thanks
>> D
>>
>>
>
>.
>
- Next message: Marina Roos [SBS-MVP]: "Re: ICW firewall config failed."
- Previous message: Ron Korszo: "Re: Compatible Modem?"
- In reply to: Susan Bradley, CPA aka Ebitz SBS Rocks [MVP] : "Re: Client authentication"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
