Re: Mac OSX Client through ISA 2004
- From: "JML" <nospam@xxxxxxxxxxxxx>
- Date: Mon, 20 Jun 2005 10:09:13 -0700
Thank you for your very helpful response. I won't be able to get to this
until next weekend and will reply then with the results.
John
"Crina Li (MSFT)" <v-crinal@xxxxxxxxxxxxxxxxxxxx> wrote in message
news:vv3KmaYdFHA.2656@xxxxxxxxxxxxxxxxxxxxxxxx
> Hi John,
>
> Thank you for posting in SBS newsgroup.
>
> From your description, I understand you want to know how to configure
> ISA2004 to enable the Mac to access the internet and Exchange. If I have
> misunderstood your concerns, please do not hesitate to let me know.
>
> By default, SBS allows only the SBS Internet User Groups to access
> Internet. Since the non-Windows client doesn't support the NTLM
> authentication so the Mac client is unable to pass the authentication on
> the SBS/ISA.
>
> To work around this issue, we may try the following steps to allow the MAC
> clients to connect to the Internet through ISA:
>
> 1. We need to configure non-Windows client as the SecureNAT clients so
> that
> they will treat ISA as the router. It means that the internal server's
> default gateway must be the internal NIC of the SBS. Please do not
> configure any proxies in Internet browser applications.
>
> 2. Configure Mac clients to use the static IP addresses. If you still
> want
> to use the DHCP, we need to configure the DHCP Reservation. To do that,
> please refer to the following document:
>
> http://www.microsoft.com/windows2000/en/server/help/default.asp?url=/windows
> 2000/en/server/help/sag_DHCP_pro_AddReservation.htm
>
> 3. Create a Computer Set on ISA, and then add the IP addresses range of
> the
> non-Windows client as following:
>
> 1) Click "Start", point to "Programs", point to "Microsoft ISA Server",
> and
> then click "ISA Server Management".
> 2) In "ISA Server Management", expand "<ISA_Server_Name>", where
> <ISA_Server_Name> is the name of your ISA Server computer, and then click
> "Firewall Policy".
> 3) In the right pane, click the "Toolbox" tab, and then click "Network
> Objects".
> 4) On the "Network Objects" menu bar, click "New", and then click
> "Computer
> Set".
> 5) In "New Computer Set Rule Element", type a name in the "Name" field. In
> the "Computer, address rangers and subnets included in this computer set:"
> field, click Add Address Range.
>
> 4. Create a Firewall Policy to allow outgoing traffic and then apply to
> the
> Computer Set as following:
>
> 1) Click "Start", point to "Programs", point to "Microsoft ISA Server",
> and
> then click "ISA Server Management".
> 2) In "ISA Server Management", expand "<ISA_Server_Name>", where
> <ISA_Server_Name> is the name of your ISA Server computer. Expand
> "Firewall
> Policy", click the "Tasks" tab, and then click "Create New Access Rule".
> 3) On the "Welcome to the New Access Rule Wizard" page, type a name in the
> "Access rule name" field, and then click "Next".
> 4) On the "Rule Action" page, click the "Allow" option, and then click
> "Next".
> 5) On the "Protocols" page, select "All outbound traffic" and then click
> next.
> 6) In "Access Rule Sources", click "Add".
> 7) In "Add Network Entities", expand "Computer Sets", and then click the
> Computer sets that you have created earlier. Click "Add", click "Close",
> and then click "Next".
> 8) Follow the wizard to finish it.
>
> 5. In ISA Management, make sure "Require all users to authenticate" is not
> selected as following:
>
> 1) Click "Start", point to "Programs", point to "Microsoft ISA Server",
> and
> then click "ISA Server Management".
> 2) In "ISA Server Management", in the right pane, click the "Toolbox" tab,
> and then click "Networks".
> 3) Right click Internal and select Properties.
> 4) In Web Proxy tab | Authentication button, make sure "Require all users
> to authenticate" is not selected.
>
> Hope the information help and I look forward to your reply.
>
> Best regards,
>
> Crina Li (MSFT)
>
> Microsoft CSS Online Newsgroup Support
>
> Get Secure! - www.microsoft.com/security
>
> =====================================================
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> =====================================================
>
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
> --------------------
> | From: "JML" <nospam@xxxxxxxxxxxxx>
> | Subject: Mac OSX Client through ISA 2004
> | Date: Sat, 18 Jun 2005 22:14:38 -0700
> | | Newsgroups: microsoft.public.windows.server.sbs
> | |
> | Just installed SBS 2003 SP1 without a hitch. :) Haven't previously
> installed
> | ISA as I was waiting for SBS SP1 and ISA 2004 for SBS. Next step is to
> | install ISA 2004.
> |
> | Before I do so however, I need to figure out how to configure ISA to
> allow
> | the Mac OSX client to access the internet. Without any ISA installed,
> the
> | Mac client can now access the internet, access the exchange server via
> IMAP
> | and Entourage 2004 and access server resources (AdmitMac is installed on
> the
> | Mac and partially adds the Mac to AD).
> |
> | I've reviewed the "Connecting Macintosh OS X 10.3 and Higher Clients to
> a
> | Windows Small Business Server 2003 Network" document located here:
> |
> http://download.microsoft.com/download/5/3/c/53c9bd6b-6927-43ca-8871-f3b60db
> 13968/SBSMacDoc.doc
> | but the only reference to ISA relates to the .local problem. As I did
> not
> | use the .local suffix, I don't need to resolve that problem.
> |
> | What specific steps do I need to take to configure ISA 2004 and/or the
> Mac
> | to enable the Mac to access the internet and Exchange (via IMAP) like it
> | does without ISA installed.
> |
> | I've spent hours searching for this answer thinking that it had already
> been
> | addressed but no luck.
> |
> | John
> |
> |
> |
>
.
- Follow-Ups:
- Re: Mac OSX Client through ISA 2004
- From: Crina Li (MSFT)
- Re: Mac OSX Client through ISA 2004
- References:
- Mac OSX Client through ISA 2004
- From: JML
- RE: Mac OSX Client through ISA 2004
- From: Crina Li (MSFT)
- Mac OSX Client through ISA 2004
- Prev by Date: Doubt with XP users and SBS2003
- Next by Date: Re: Customer Web Access
- Previous by thread: RE: Mac OSX Client through ISA 2004
- Next by thread: Re: Mac OSX Client through ISA 2004
- Index(es):
Relevant Pages
|
