• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Firewall Client

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2004 Firewall] >> Firewall Client >> Firewall Client Page: [1]
Login
Message << Older Topic   Newer Topic >>
Firewall Client - 19.Feb.2004 3:09:00 PM   
matt.saum

 

Posts: 17
Joined: 19.Feb.2004
From: Toledo,OH
Status: offline
When I installed the Firewall Client, the settings in IE were changed only for the domain admin user that I used. In order for another user to get the same IE connections settings, I have to reinstall or repair under that user and hope that they are a Local Admin in some way. Is this typical?

I tried setting up auto discovery (internal users only). I set the "Publish automatic discovery information" option for port 8081. Added the 252 option in DHCP to point to http://isaserver.domain.com:8081/wpad.dat.
No luck.
I put a test.dat file out there and browse to the ISA server using the above url with test.dat and it finds it and asks to open or save. There is no WPAD.DAT file there. I was under the impression from other sources that it is put out there by a request?.?..?

ISA Server(integrated mode)is a member server in an NT Domain. Latest SPs.
Post #: 1
RE: Firewall Client - 20.Feb.2004 1:01:00 AM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi Matt,

DHCP only works for admins, you should always use DNS to publish your wpad info.

HTH,
Tom

(in reply to matt.saum)
Post #: 2
RE: Firewall Client - 20.Feb.2004 2:05:00 AM   
Guest
Why not adding the network policies all users use same internet explorer settings?

(in reply to matt.saum)
  Post #: 3
RE: Firewall Client - 20.Feb.2004 12:03:00 PM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi Unreg,

Yes, you can create Group Policy to assign all users to use autodetection, and then use DNS for the wpad entries.

Thanks!
Tom

(in reply to matt.saum)
Post #: 4
RE: Firewall Client - 20.Feb.2004 3:54:00 PM   
matt.saum

 

Posts: 17
Joined: 19.Feb.2004
From: Toledo,OH
Status: offline
quote:
Originally posted by <unregistered>:
Why not adding the network policies all users use same internet explorer settings?

I am not using AD. [Frown]

(in reply to matt.saum)
Post #: 5
RE: Firewall Client - 20.Feb.2004 4:04:00 PM   
matt.saum

 

Posts: 17
Joined: 19.Feb.2004
From: Toledo,OH
Status: offline
quote:
Originally posted by tshinder:
Hi Matt,

DHCP only works for admins, you should always use DNS to publish your wpad info.

HTH,
Tom

Even though I am using port 8081?.. I read that DNS only works if you use port 80? [Confused]

(in reply to matt.saum)
Post #: 6
RE: Firewall Client - 20.Feb.2004 4:09:00 PM   
matt.saum

 

Posts: 17
Joined: 19.Feb.2004
From: Toledo,OH
Status: offline
I am not using Active Directory, yet.

I read that DNS uses port 80 only. I am using port 8081.

I tried putting an ALIAS entry in the DNS server: WPAD.domain.com (internal use) and pointed it to my isa.domain.com (internal) It didn't work either.

And I am still learning how to use this sight, bear with me. [Confused]

(in reply to matt.saum)
Post #: 7
RE: Firewall Client - 21.Feb.2004 2:14:00 AM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi Matt,

You are correct! With DNS you must use TCP port 80 to publish autodiscovery information. However, you should NOT run a Web site on the firewall, so there shouldn't be any problems with that.

While its a bit different with ISA 2000, it would be worth checking out the ISA Server 2000 in Education Kit for deatils on how to automatie configs using Wpad.

HTH,
Tom

(in reply to matt.saum)
Post #: 8
RE: Firewall Client - 23.Feb.2004 3:32:00 PM   
matt.saum

 

Posts: 17
Joined: 19.Feb.2004
From: Toledo,OH
Status: offline
I tried to use port 80 but it says the port is in use. I think this is because of my two NIC configuration? [Confused]

(in reply to matt.saum)
Post #: 9
RE: Firewall Client - 24.Feb.2004 12:33:00 AM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi Matt,

Is IIS installed on the firewall? Is so, just go into the Control Panel and use the Add/Remove programs applet to remove all IIS components.

HTH,
Tom

(in reply to matt.saum)
Post #: 10
RE: Firewall Client - 1.Mar.2004 6:20:00 PM   
matt.saum

 

Posts: 17
Joined: 19.Feb.2004
From: Toledo,OH
Status: offline
I uninstalled the IIS components and everything is fine now. WPAD is now out there, thanks for your help. Is it true about the dhcp(WPAD) method. It only works if the client has local admin priv's? [Smile]

(in reply to matt.saum)
Post #: 11
RE: Firewall Client - 1.Mar.2004 11:04:00 PM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi Matt,

Great! Good to hear you got it working and thanks for the follow up!
Tom

(in reply to matt.saum)
Post #: 12

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2004 Firewall] >> Firewall Client >> Firewall Client Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts