Re: First time SBS 2k3 Premium install w/ ISA 2004 questions ???

Help please!

On 2005-08-23 11:10:07 -0700, Aaron Marks <no@xxxxxxx> said:

Do all of the clients have to have access to the proxy in order to get internet even through ISA 2004 when they are in the Users group that I listed. Then what are the proxy settings, and how do I allow pograms like Connected Online Backup or the VoIP Phones that we are getting get through that Proxy? If I allow all users is it essentially undoing what ISA 2004 is set out to do? Thanks.

On 2005-08-23 04:28:10 -0700, "Frank McCallister SBS MVP" <anonymous> said:

Hi Aaron

Did you install the ISA Firewall client on the Workstations and insure that the IE connections tab is using the correct Proxy setings. Are you using Https://address/remote or /exchange where address is FQDN or IP address which agrees with what you set the certificate to in CEICW?

--
Frank McCallister SBS MVP
COMPUMAC
"Aaron Marks" <no@xxxxxxx> wrote in message news:2005082304100416807%no@xxxxxxxxx
I installed SBS 2003 Premium for the first time the other day for a business that I've been working for. I have had no experience with ISA 2004 up until this point. The server has two network cards, one with a direct connection to the internet and the other connected to a switch which connects to the rest of the computers on the network.

I installed the premium disc right after the set up finished and I was presented with the to-do list. I then ran all the wizards. The very first problem that I had with ISA 2004 was that none of the users could get internet access. The second to last rule is was that SBS Internet Users could get access, but even though all the users were added into this group I couldn't get it to work unless I changed it to say 'All Users'. I would like to use the Internet Users group though to restrict some people from getting internet access. Also, I'm assuming that rules must be processed from the bottom up because the last rule says to deny access to all internet traffic.

The next thing that I'm having a problem with is that I just tried to connect to OWA and RWW from outside the office and it isn't letting me. I was able to initiate Remote Desktop to the server, but nothing else. Again, I ran the wizzards and though that it would have opened up the correct stuff on ISA 2004 through the Remote Access wizzard.

Thank you.  I'd really appreciate any help to explain this to me further.
--
Aaron Marks I/T Consulting
aaronmarks@xxxxxxxxx



.

Relevant Pages

  • Re: Site2Site VPN - Web page requests returns FWX_E_TERMINATING
    ... have?Firewall client or Web proxy clients?If you are using FWC is normal ... to use proxy locally and create an exception for your web site. ... in them,...this causes them to be interpreted by Internet ... Understanding the ISA 2004 Access Rule Processing ...
    (microsoft.public.isa.vpn)
  • Re: SBS 2003 R2 w/ISA Server 2004 Preventing Desktop Internet Acce
    ... SBS uses the SBS Internet Users group to control access to the internet through ISA. ... The Firewall Client on the workstation is how the user's credentials actually get passed to the ISA server, allowing the ISA server to check if the user is a member of the SBS Internet Users group in order to grant access. ...
    (microsoft.public.windows.server.sbs)
  • Re: Exception list problem in internet explorer in the Local Netwo
    ... But I don't want that the requests to the internal web sites in the local ... network go to the ISA proxy. ... However I never use GPO for proxy settings it is too rigid and does seem to have ... We use the ISA proxy server to go to internet in the local network. ...
    (microsoft.public.isa.clients)
  • RE: Outlook clinet config for RPC/HTTP
    ... Internet as long as my Proxy referances the DNS name. ... I have looked at the ISA logs, the RPC Proxy server logs ...
    (microsoft.public.exchange.admin)
  • RE: 504 Proxy timeout only with SSL traffic
    ... Hi I setup an access rule as you requested and tried it with web proxy off on ... the DMZ network is considered External to the ... And can access all other HTTPS sites on the internet? ... that there may be something wrong with the proxy engine on the ISA, ...
    (microsoft.public.isa)