Posts: 46
Joined: 5.Sep.2003
From: AL
Status: offline
I've never used the FW before, so after reading and listening to everyone about the benefits it provides ,I decided to install it on my pc first to understand it better. One thing I notice right off in the Monitoring tab was my workstation is now sending out DHCP request to 255.255.255.255 and of course gettting denied and all my https connection attempts were failing multiple times and then failing go thru. Is there a post somwhere on the basic setup I can read to understand what is happening? thanks!!
Posts: 6022
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline
quote:
ORIGINAL: dfcrj
I've never used the FW before, so after reading and listening to everyone about the benefits it provides ,I decided to install it on my pc first to understand it better.
then u have missed reading that never make ur Internal NIC to request a IP.
Posts: 46
Joined: 5.Sep.2003
From: AL
Status: offline
that is correct, right after installed the FW I noticed the 255.255.255.255 request being made. I've installed the client on 2 workstations to test, both of which immediately started making the request.
Posts: 46
Joined: 5.Sep.2003
From: AL
Status: offline
My point is it start after the FW client was installated. I'm testing the client to see how it works before pushing it out to every workstation. I want to know why the two workstations are sending out 255 request now, is there something wrong with the configuration?
My ISA Server has this logged and I don't have the Firewall Client isntalled on my hosts.
The client is sending out a broadcast - ISA sees the broadcast, and since there is no rule to allow it, ISA denies it. That's how I've always seen it done by my ISA Server.
Posts: 46
Joined: 5.Sep.2003
From: AL
Status: offline
I was just curious why I could see it thru the live logging now for my workstation with the client piece installed but can't see for the other 300 workstations not running the client. I appreciate it.
Posts: 46
Joined: 5.Sep.2003
From: AL
Status: offline
oh yea forget, yea this still happens. I can see multiple failed attempts but I'm still able to access the sites. Another thing I noticed, I couldnt get some web pages to load completely. I can see denied to the proxy on port 8080 from my workstation.