Re: Question about ISA and roaming clients (laptops)

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Phil (anonymous)
Date: 07/22/04 

Date: Thu, 22 Jul 2004 09:38:03 -0500

I suppose I could have them disable it...I was just trying to avoid any
friction from the users, more specifically one of them is the owner of the
company, has only been using a computer for about 2 years and is not very
quick on the uptake when it comes to technology and I pretty much have to
babysit him sometimes. I'm wondering if there isn't someway to have ZA
disable itself automatically under certain conditions...

Thanks for the insight though.

"Lanwench [MVP - Exchange]"
<lanwench@heybuddy.donotsendme.unsolicitedmail.atyahoo.com> wrote in message
news:%236pfQd$bEHA.716@TK2MSFTNGP11.phx.gbl...
> Phil wrote:
> > I saw a post a few back about running personal firewall software on
> > computers and having ISA on my SBS server and it prompted me to ask a
> > few questions. Marina had said that you cannot run personal firewall
> > products on computers if you are running ISA on the server.
>
> Well, can't speak to the ISA client, but this isn't entirely true as far
as
> I know - but you *don't* want to have your personal fw software running
> actively on a LAN connection in general anyway - you won't get new message
> notification/delivery in Outlook, etc., for one thing
>
> > (I'm
> > assuming this is because ISA has a client portion that is installed
> > on the computers in the LAN.) I currently have ZoneAlarm Pro running
> > on 4 laptops to protect them when they are out of the office and
> > hooking up to their home internet connections or while on the road.
> > Two of these machines are in the office most of the time, the other
> > two almost never hook up to the corporate LAN.
> >
> > My question is, if I can't run Zone Alarm on these computers, then
> > how can I protect these mobile users while they are out there roaming
> > the dark alleys of the net? Since two of the users almost never hook
> > up to the LAN, would I still run ZoneAlarm on their computers and not
> > install the client portion of ISA? Any input or suggestions would be
> > greatly appreciated.
>
> Can't you just show them how to disable ZA while in the office? Tell them
> it's like a car alarm - when you're in the car (office) you disable the
> alarm (firewall).
> >
> > Thanks,
> > Phil
>
>

Relevant Pages

  • Re: Question about ISA and roaming clients (laptops)
    ... Marina had said that you cannot run personal firewall ... > products on computers if you are running ISA on the server. ... > on the computers in the LAN.) ...
    (microsoft.public.windows.server.sbs)
  • Re: Oh why did Apple dump IBM....
    ... The back end is supposed to insulate the hardware peculiarities from ... would be easy to lurch from one ISA to another, ... And I'm talking about the CPU's instruction set visible to the assembler ... computers have much less RAM on the whole. ...
    (uk.comp.sys.mac)
  • Re: ISA Monitor Shows Traffic from Computers that are powered off !
    ... on which we have ISA 2004 installed. ... Employees leave at 5:00pm and switch off their computers. ... Client computers should never have exposed ports. ... anymore since the trojan probably knows all of your accounts. ...
    (microsoft.public.isa)
  • Re: Force All to use firewall Client ONLY
    ... Remove all the browser's proxy settings. ... Definition which will only be true if the ISA is doubling as the LAN Router. ... Create an anonymous Access Rule for HTTP/HTTPS/FTP that only applies to ...
    (microsoft.public.isa)
  • Re: general question on design options
    ... Behind that I have my ISA, ... How do you get the VPN connections that terminate on the Cisco to get past ... DMZ and not the LAN. ...
    (microsoft.public.isa)