Re: Suggested ISA rules

Dave Taylor wrote:

Can someone post some isa 2004 rules to restrict web access etc.. Running in 1 nic mode.

I have tried to restrict people from using the web but each time people can still gain access. I have disconnected all the sessions and made sure that the settings have been applied. Any ideas?

Thanks
Dave

While your SBS/ISA has a single nic, you're going to find it very very difficult to guarantee that users can't surf. Largely because they're not dependent on ISA. You have a separate gateway that provides direct access to the internet.

If you want to make darn sure the ISA rules "win", you need to move to a 2 nic configuration with all internal clients using the SBS internal nic as their gateway (ie the only device connected directly to your broadband access device is the SBS using its' external nic).

--
Steve Foster [SBS MVP]
---------------------------------------
MVPs do not work for Microsoft. Please reply only to the newsgroups.
.

Relevant Pages

  • Re: Internet Password
    ... access to the internet after the user has logged on. ... Standard has *no* concept of controlling outbound access. ... Steve Foster [SBS MVP] ...
    (microsoft.public.backoffice.smallbiz2000)
  • Re: Internet seems to stop responding, but stopping SMTP service works
    ... I am running an SBS 2000 server. ... Over the last couple of weeks the internet ... Steve Foster [SBS MVP] ...
    (microsoft.public.backoffice.smallbiz2000)
  • Re: remote Outlook
    ... 'Configure your computer to use Outlook via the Internet' link. ... Les Connor [SBS Community Member - SBS MVP] ... >> Les Connor [SBS Community Member - SBS MVP] ...
    (microsoft.public.windows.server.sbs)
  • Re: Users that doesnt login to the domain cant reach internet
    ... > traffic go through ISA. ... > Some of the users don't logon to the domain and only use SBS server ... > for OWA and to reach the internet trough the ISA, ... Steve Foster [SBS MVP] ...
    (microsoft.public.windows.server.sbs)
  • RE: RWW not accessible over web
    ... Can you access RWW from SBS itself thru http://localhost/remote/? ... Click the "Connect to the Internet" link. ... On the ISA Server computer, stop the Microsoft Firewall service. ...
    (microsoft.public.windows.server.sbs)
Loading