Welcome to ISAserver.org

Computers vs. Computer sets

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> Management >> Computers vs. Computer sets

Page: [1]

Message

<< Older Topic Newer Topic >>

Computers vs. Computer sets - 8.Aug.2006 10:34:52 PM

C.Houseman

Posts: 29
Joined: 1.May2006
Status: offline

With a previous firewall, my customer was able to:

Define a Computer as a name and IP address.
Add the computer to a Group
Use the Group name in a rule.

In ISA 2004, one can

Define a Computer as a name and IP address.
Use Browse, then Find to lookup a Computer and add it to a Computer Set
Use the Computer Set in a rule.

What's the difference?

Previous firewall, when I change the IP address of the Computer, I'm done.
ISA 2004, changing the IP of the Computer doesn't affect the IP address in the associated Computer Set. The change must be done repeatedly for every Computer Set in which the Computer appears.

Am I overlooking an easy way of synchronizing Computers with the Computer Sets in which the same name appears? If not, is this recognized as a management area needing improvement?

[sorry, not running ISA 2006 beta any more so can't easily check to see if it's in there...]

Post #: 1

Featured Links*

RE: Computers vs. Computer sets - 9.Aug.2006 8:17:41 AM

denizyalcin

Posts: 122
Joined: 19.Jan.2005
From: Turkey
Status: offline

But that's not true. It works the way it should. I think there's some kind of misunderstanding on your side. Or maybe your ISA installation has some problems.

(in reply to C.Houseman)

Post #: 2

RE: Computers vs. Computer sets - 9.Aug.2006 3:25:49 PM

C.Houseman

Posts: 29
Joined: 1.May2006
Status: offline

OK, I did some further testing and discovered a misconception, but the problem is still there.

The computer I define under Computers is ignored when using the Find button. The Find is doing name resolution from DNS.

But, if I change the IP for that name in DNS, come back to ISA and open the computer set, the IP address shown for that name is unchanged. Even after I IPCONFIG /FLUSHDNS and stop/start the ISA Management app. I haven't tried rebooting the ISA server yet.

If you find or know otherwise, please outline in detail your scenario to show where my testing has gone wrong. Just telling me "you're wrong" or "your ISA is broken" doesn't help very much.

(in reply to denizyalcin)

Post #: 3