Welcome to ISAserver.org

Complex Network and SecureNat Help Needed

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2000 Firewall] >> SecureNAT Client >> Complex Network and SecureNat Help Needed

Page: [1]

Message

<< Older Topic Newer Topic >>

Complex Network and SecureNat Help Needed - 2.Aug.2005 4:31:00 PM

Bird_E1

Posts: 3
Joined: 11.Feb.2005
From: Boulder, CO
Status: offline

Hello all,
Here is my situation, I have two networks Office1 and Office2. Both offices have a ISA 2000 server box that acts as a firewall and Web proxy to allow users from each network access the internet. Each client only has the proxy server setting in their IE browser set to the ISA server, and a few have the Firewall client installed due to other internet access needs.

The two ISA servers are also connected together via a persistent VPN connection. From this connection clients from each network can access resources on the other network. I have the internal ip of the ISA server as the default gateway assigned on each client via dhcp. I also have setup a static route on the ISA servers so that internal traffic between both offices is sent over the VPN tunnel and not to the internet. Now here is the big question, I have a couple of clients that need to access the internet that need some extended functionality, however I can not install the firewall client on these clients and must set them up as secureNAT clients. The problem is that if I set their default gateways to point directly to the ISA server the ISA server is going to only route the internal traffic to the other office network.

Did I configure this whole thing wrong? Is there something I can do so I can have my ISA server as a default gateway to the other office network for some clients and a true SecureNAT gateway for others?

This seems complicated I hope it makes sense!
Thanks!
Bob