Welcome to ISAserver.org

2003 Server doesn't pass client username to ISA

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> Access Policies >> 2003 Server doesn't pass client username to ISA

Page: [1]

Message

<< Older Topic Newer Topic >>

2003 Server doesn't pass client username to ISA - 12.Dec.2006 3:39:47 AM

apj

Posts: 1
Joined: 9.Oct.2006
Status: offline

Hey all,
We have a need to upload some files overnight.
I have setup rules and even opened them right out to see just when it starts to allow, but never does.. anyway. If I setup a normal client PC that authenticates on our domain, the upload happens and the username appears in the ISA log with a query running as expected and all works.. If I have the server do the upload, it tries but ISA log shows Initiated then Closed.. noticed that the Client Username field is unpopulated? why is this?
This app that does the upload is actually a Service running on the server, although I have now configured the service to logon as a valid domain user.. works on the test PC like this..and shows in the ISA log as that user (PC runs FW client)
I don't think it's too restricted, more like 2003 Server has a bug or doesn't conform/feed like a PC FW client does?
Hard to define, but thought I'd ask..
any clues would be appreciated..
AJ

Post #: 1

Featured Links*

RE: 2003 Server doesn't pass client username to ISA - 12.Dec.2006 3:17:48 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi AJ,

for non-web based traffic it's the Firewall client that performs the authentication, not the application. However, on a server you do *not* install the Firewall client. Therefore, for non-web based traffic from servers you need to create anonymous access rules. That means allow them from the Internal network or better only from the IP addresses of the servers (that should be fixed in anyway) and for 'all users'.

Of course, make sure the server is configured as a SecureNAT client and that the DNS resolving works flawless.

HTH,
Stefaan

(in reply to apj)

Post #: 2