Welcome to ISAserver.org

2006 ISA Zoneing Question [Noob Here]

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Firewall] >> Network Infrastructure >> 2006 ISA Zoneing Question [Noob Here]

Page: [1]

Message

<< Older Topic Newer Topic >>

2006 ISA Zoneing Question [Noob Here] - 8.Jul.2007 8:24:25 AM

sim

Posts: 3
Joined: 8.Jul.2007
Status: offline

Hello all

Iv never used ISA 2006, and 4 days ago I was instructed by my boss to get it up and running with certain requirements.

I have installed and configured, with the help of Thomas's guides Thank You...
NLB and Array Replication between 2 ISA servers, have been completed
I will not be using the ISA as a Firewall, as this is done by a 3rd party.
All I need it to do is proxying/cacheing, web logging of users and stats, with blocks on certain sites.

I have a DMZ where the two ISA servers sit on a range of eg 192.168.10.x/24.
My Internal Zone is ranged at e.g.192.168.1.x/24.
At the moment i cant get the internal zone to ping or do antything such as open a file share (testing purposes) with the two ISA servers. But those same clients in the internal zone can see everything else in the dmz(perimeter) zone and do the above mentioned.

also what would be advisable for DNS server for the iSA servers.?

could anyone help me out here..??

Thank youf ro takeing the time to read this, and look forward for your feedback.

Post #: 1

Featured Links*

RE: 2006 ISA Zoneing Question [Noob Here] - 8.Jul.2007 4:57:36 PM

royh

Posts: 284
Joined: 23.Feb.2007
From: Lebanon
Status: offline

Hi,
You have to allow the ping on the ISA to be able to ping it. Edit the system policy rule and check your access rules.
Concerning the DNS, use your internal DNS.

HTH,

Roy

_____________________________

Roy Haddad,M.Sc
CCNA, MCSE 2003 Messaging & Security,C|EH

(in reply to sim)

Post #: 2

RE: 2006 ISA Zoneing Question [Noob Here] - 9.Jul.2007 5:26:58 AM

sim

Posts: 3
Joined: 8.Jul.2007
Status: offline

Thank you for responding back, your suggestions were already in place.
I staill cant ping or do file share. Here is a crude pic of network..

[3rd party Firewall]
       |         |              ------------------
       |         |             - Perimiter Zone -
       |         |              ------------------
       |         |              - [2x Relay servers]
       |         |-------- - [2x ISA Servers 192.168.10.50/192.168.10.51]
       |                        - 192.168.10.1/24 - 192.168.10.254/24
       |                         -------------------
       |
       -----------------
       -    Internal   -
       -----------------
       192.168.1.1/24 - 192.168.1.254/24

From clients in the internal I can ping all servers in Perimeter except the two isa servers.
and from the isa2006 servers cannot ping anything.
System policy for ping is allowed.
Im aslo running all machines through ESX server.

look forward to your replies.

(in reply to royh)

Post #: 3

RE: 2006 ISA Zoneing Question [Noob Here] - 19.Sep.2007 7:21:40 PM