Re: ISA 2004 & SBS 2003

From: Doug (Doug_at_discussions.microsoft.com)
Date: 01/03/05 

Date: Mon, 3 Jan 2005 14:55:03 -0800

Hi Marina,

ISA '04 does have a client but I didn't install it on any of the PCs. I did
check that the proxy settings were as they should be after I uninstalled ISA
and they are. Everything seems to be working correctly with the exception of
the active/passive FTP issue. The only time I use FTP anymore is to put or
get website files or I probably wouldn't have even noticed anything. Any
other ideas?

Thanks again,
Doug

"Marina Roos [SBS-MVP]" wrote:

> Hi Doug,
>
> I assume that ISA 2004 also has a Firewall Client. Did you uninstall that
> from the workstations? Did you check the LAN-settings in IE and made sure
> the proxy is empty?
>
> --
> Regards,
>
> Marina
> Microsoft SBS-MVP
> One of the Magical M&M's
>
> "Doug" <Doug@discussions.microsoft.com> schreef in bericht
> news:32E8E1BD-6344-4DAB-837F-636040D24581@microsoft.com...
> > Hi Again Marina,
> >
> > I am not certain it is related but here's what I think. Prior to
> installing
> > ISA 2004 - everything worked correctly. That particular server doesn't
> have
> > a hardware firewall, just the basic firewall/NAT on the external
> interface.
> > NAT is configured through RRAS. Once I uninstalled ISA 2004 and after I
> > manually configured RRAS for VPN access and NAT - everything seemed to be
> > working correctly. VPN, RWW, SPS, OWA, etc. were all working and Inernet
> > access from the inside was working as well. But I noticed yesterday that
> I
> > could not FTP from anywhere inside the network to anywhere outside. I
> could
> > actually make the connection and authenticate but most everything would
> time
> > out after that. For my sites that support passive FTP, I configured my
> FTP
> > clients to use passive FTP and it works correctly. For sites that don't
> > suport passive FTP, I have to connect through other networks to put or get
> > files. Passive FTP is usually used to "get around" firewall issues on the
> > client side. This is what is making me think that it may be a
> configuration
> > issue with NAT. So, I decided to take your advice and reinstall the
> server
> > tools hoping that reconfiguring with the wizards would correct whatever
> was
> > misconfigured. I disabled RRAS on the server prior to doing this so that
> I
> > would know the wizards worked again if everything was configured correctly
> > after using the wizards. After all of that, everyhting seems to work just
> as
> > it did after I manually configured RRAS.
> >
> > Sorry for the long response, just wanted to try and explain my thinking.
> I
> > still think it is some sort of NAT/basic firewall issue but can't find
> > anything so far. Since RRAS is where these services are configured, this
> is
> > where I think the problem may be.
> >
> > Thanks again - Doug - MCSE, CNE
> >
> > "Marina Roos [SBS-MVP]" wrote:
> >
> > > Hi Doug,
> > >
> > > I don't really see the connection between RRAS and FTP. If you need
> RRAS,
> > > did you run the RRAS wizard yet?
> > >
> > > --
> > > Regards,
> > >
> > > Marina
> > > Microsoft SBS-MVP
> > > One of the Magical M&M's
> > >
> > > "Doug" <Doug@discussions.microsoft.com> schreef in bericht
> > > news:FE3D5466-34BA-4E6E-B4F8-3F82FB5CE86F@microsoft.com...
> > > > Thanks for the reply Marina. I went ahead and manually configured the
> NAT
> > > > mappings so that I could publish owa, RWW, etc. and it worked fine.
> But,
> > > as
> > > > per your advice, today I disabled RRAS and reinstalled the server
> tools to
> > > > test. Once I reinstalled the tools and used the connect to the
> Internet
> > > > wizard and the remote access wizard, SBS configured everything as it
> used
> > > to
> > > > before I broke it ;)
> > > > However, I maintain a couple of websites and since I broke RRAS, I can
> > > only
> > > > connect with FTP to those hosts if I'm using passive FTP - even after
> > > > reinstalling server tools and reconfiguring with the wizards. I
> didn't
> > > have
> > > > to do this before - any idea what still needs to be adjusted? Thanks
> > > again -
> > > > Doug.
> > > >
> >
>
>
>

Relevant Pages

  • Re: Is this a 3-Leg Perimeter scenario?
    ... the same configuration as I had it originally before upgrading to ISA 2004 ... No PersisentRoute enrty on the clients; no firewall client disabling; no IE ... using IE to access the FTP. ...
    (microsoft.public.windows.server.sbs)
  • RE: Cant access FTP sites requiring authentication
    ... I think this is an issue relate to the ISA ... Method 1: Disable FTP web proxy on IE7: ... Ensure the client computer's default gateway pointing to ISA internal ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • Re: FTP Access
    ... I had to get in and modifiy the ISA install adding the client component, ... I'm only seeing the FTP protocal logged in ISA monitoring when I'm ...
    (microsoft.public.windows.server.sbs)
  • RE: pop3 and ftp connection problems behind ISA 2004 SE
    ... Logging are in Dashboard of ISA server array, in that you have to select time ... Of give the client ip address then try from that client ... clients can connect to everything on the internet, except for POP3 and FTP... ...
    (microsoft.public.isa)
  • Re: Deaktivierter FW Client und Internet geht trotzdem
    ... >> FTP Programm ist WS FTP Pro allerdings geht Upload auch über den IE ... >> Jetzt habe ich bei mir mal den neuen Client installiert also ganz normal ... >> Muss der Client dann auch auf dem ISA Server installiert werden? ... Den Firewallclient brauchst du eigentlich nur, ...
    (microsoft.public.de.german.isaserver)