Welcome to ISAserver.org

Denied connection in SBS

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 General ] >> ISA 2004 SBS >> Denied connection in SBS

Page: [1]

Message

<< Older Topic Newer Topic >>

Denied connection in SBS - 12.Jun.2008 9:51:03 PM

scott.hine

Posts: 4
Joined: 31.May2006
Status: offline

SBS 2003 ISA 2004

I have come accross a problem where a computer (which is logged onto by a member of the SBS internet users group) is running a program that acesses the internet. Now in the logs it says that the connection is denied and that the client username that is acessing the site is "-" now i can understand why it is denying the connection (because the user "-" isn't in the group allowed access to the firewall rule". If i allow all users access to the rule it works fine.

My question:

How do i get ISA to allow "-" to access external sites without allowing ALL USERS access to the "Internet allow all" rule.

NOTE# all other internet services work fine like browsing webpages and such.

Post #: 1

Featured Links*

RE: Denied connection in SBS - 13.Jun.2008 5:27:25 PM

Rotorblade

Posts: 810
Joined: 27.Feb.2007
Status: offline

quote:

How do i get ISA to allow "-" to access external sites without allowing ALL USERS access to the "Internet allow all" rule.

Is the Firewall Client installed? If the program (on the computer) is not proxy aware, then you will need to install the ISA Firewall client because you are requiring authentication in your access rule.

HTH

RB

_____________________________

David Melvin
Ohio
MCSE: Security 2003, MCSA:Security 2003

(in reply to scott.hine)

Post #: 2

RE: Denied connection in SBS - 13.Jun.2008 7:14:48 PM

scott.hine

Posts: 4
Joined: 31.May2006
Status: offline

Yeah the firewall client is installed, but i've noticed this quite a bit on SBS where any action performed by a non proxy aware program gets blocked by ISA, i mean its not like ISA is faulting but there should be away where ISA can allow trusted connections from trusted sources without allowing uneccessary permissions.

Thanks for your reply.

(in reply to Rotorblade)

Post #: 3