Re: Need help with ISA setup.
- From: v-bpeng@xxxxxxxxxxxxxxxxxxxx (Bill Peng [MSFT])
- Date: Wed, 06 Apr 2005 09:44:30 GMT
Hi Tony,
Nice working with you here.
For your corporate LAN domain member users, you can install Firewall Clients on the domain member computers. You can also configure them to
act as a Web Proxy client. To do so:
1. Open Internet Options.
2. Click Connections tab and click LAN Settings.
3. Key in your SBS (ISA) Server's NetBIOS name and port 8080 in the Proxy Settings boxes.
[Note] You can also configure the following Group Policy entry: User Configuration/Windows Settings/Internet Explorer
Maintenance/Connection/Connection Settings.
If you still want the ISA to forward all web proxy requests to an external proxy server, you can configure the followings:
1. Open ISA Management.
2. Go to Servers and Arrays/Network Configuration/Routing.
3. In the right pane, right click the Default rule and click Properties.
4. Click the Action tab and choose Routing them to a specified upstream server.
5. Click Settings tab and key in the info for the proxy server.
If they want to surf the Internet through ISA, you have 2 choices:
1. Point the default gateway to the ISA Server and the clients will be a SecureNAT client.
2. Configure the Web Proxy Settings as I stated in the beginning of this post, so they will be a Web Proxy client.
I hope the above info helps. If you have any questions, please feel free to post back.
Bill Peng
MCSE 2000, MCDBA
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
=====================================================
When responding to posts, please "Reply to Group" via your newsreader so that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
>Thread-Topic: Need help with ISA setup.
>thread-index: AcU59rWmPo0z6YRCRNa6s38YXO1bnw==
>X-WBNR-Posting-Host: 196.22.209.70
>From: "=?Utf-8?B?VG9ueVY=?=" <TonyV@xxxxxxxxxxxxxxxxxxxxxxxxx>
>References: <6974BABF-B381-4296-A5BF-9506DC2CADBC@xxxxxxxxxxxxx> <#kj04MkNFHA.1604@xxxxxxxxxxxxxxxxxxxx>
>Subject: Re: Need help with ISA setup.
>Date: Tue, 5 Apr 2005 08:47:02 -0700
>Lines: 78
>Message-ID: <9BED3503-7011-4FB0-8738-60C41052D354@xxxxxxxxxxxxx>
>MIME-Version: 1.0
>Content-Type: text/plain;
> charset="Utf-8"
>Content-Transfer-Encoding: 7bit
>X-Newsreader: Microsoft CDO for Windows 2000
>Content-Class: urn:content-classes:message
>Importance: normal
>Priority: normal
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>Newsgroups: microsoft.public.windows.server.sbs
>NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.1.29
>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA03.phx.gbl
>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:108625
>X-Tomcat-NG: microsoft.public.windows.server.sbs
>
>At the moment the remote user is not going throught the SBS server. He has a
>proxy setting in his browser that points directly to the existing
>firewall/proxy. He uses his web browser on his local XP desktop.
>My concern is that if he is logged onto a workgroup rather than a the
>domain, how will he be able to surf through ISA on the SBS server?
>
>"Bill Swan" wrote:
>
>> Hi Tony
>>
>> See here:-
>> http://www.smallbizserver.net/Default.aspx?tabid=68
>>
>> With regards to the remote users, do they access the internet locally or
>> come down to the SBS to go out to internet?
>>
>> They key to configuring ISA is to run the wizard, in your ' to do list '
>> connect to the internet (CEICW). Your remote users will depend on your
>> answer to earlier question.
>>
>> Review, give it a go and let us know.
>>
>> --
>> www.smallbizserver.net (2000 and 2003)
>>
>> microsoft.public.backoffice.smallbiz2000 (2000 NG)
>>
>> microsoft.public.windows.server.sbs (2003 NG)
>>
>> http://groups.google.com/groups?hl=en&safe=off&group=microsoft.public.backoffice.smallbiz2000
>>
>> http://groups.google.com/groups?hl=en&lr=lang_en&ie=UTF-8&safe=off&group=microsoft.public.windows.server.sbs
>>
>> http://www.sbslinks.com/
>>
>> http://www.sbsmigration.com
>> "TonyV" <TonyV@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
>> news:6974BABF-B381-4296-A5BF-9506DC2CADBC@xxxxxxxxxxxxxxxx
>> >I installed ISA server on my SBS2003 demo server to see how it works. I am
>> > new to ISA server and need some questions answered please.
>> >
>> > My network setup is as follows:
>> > Have a existing external firewall/proxy (FreeBSD box) connected to a 1601
>> > Cisco router that connects to my ISP via 64k permanent connection. I want
>> > to
>> > place my sbs2003 server between the existing firewall & the LAN. Server
>> > has 2
>> > Nics.
>> > Currently users are pointing their web browsers to the proxy for web
>> > access.
>> >
>> > 1) I am not sure how to configure the Internet-side NIC on the SBS server.
>> > Does it have to be on a different subnet than the LAN-side NIC? If so,
>> > then I
>> > assume the existing firewall/Proxy IP address would also have to be
>> > changed
>> > to reflect the same subnet as SBS server Internet-side NIC?
>> >
>> > 2) How do I configure in ISA server which internal users have web access?
>> >
>> > 3)I have a few users working at a branch office (also connected via 64k
>> > permanent line) that does not log on to the domain, just to their local
>> > profile. I don't feel they need to as they connect to our Citrix server to
>> > run their apps. Two of these users have internet access using the browsers
>> > on
>> > their local desktops (not Citrix). To change these users configs to route
>> > through ISA server, I assume I would have to install the ISA firewall
>> > client
>> > software for them...but will it work if they are not directly logged on to
>> > domain?
>> > Should I rather let them log on to domain anyway? Is there any additional
>> > network traffic to be concerned about when logged on to domain?
>> >
>> > Your assistance will be much appreciated.
>> > Thankyou.
>>
>>
>>
>
.
- References:
- Need help with ISA setup.
- From: TonyV
- Re: Need help with ISA setup.
- From: Bill Swan
- Re: Need help with ISA setup.
- From: TonyV
- Need help with ISA setup.
- Prev by Date: Companyweb - creating lists and sublists
- Next by Date: Re: recipient policies do not work as expected
- Previous by thread: Re: Need help with ISA setup.
- Next by thread: Router DHCP vs SBS2k3 DHCP
- Index(es):
Relevant Pages
|
