Welcome to ISAserver.org

Firewall Client

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> Firewall Client >> Firewall Client

Page: [1]

Message

<< Older Topic Newer Topic >>

Firewall Client - 19.Feb.2004 3:09:00 PM

matt.saum

Posts: 17
Joined: 19.Feb.2004
From: Toledo,OH
Status: offline

When I installed the Firewall Client, the settings in IE were changed only for the domain admin user that I used. In order for another user to get the same IE connections settings, I have to reinstall or repair under that user and hope that they are a Local Admin in some way. Is this typical?

I tried setting up auto discovery (internal users only). I set the "Publish automatic discovery information" option for port 8081. Added the 252 option in DHCP to point to http://isaserver.domain.com:8081/wpad.dat.
No luck.
I put a test.dat file out there and browse to the ISA server using the above url with test.dat and it finds it and asks to open or save. There is no WPAD.DAT file there. I was under the impression from other sources that it is put out there by a request?.?..?

ISA Server(integrated mode)is a member server in an NT Domain. Latest SPs.

Post #: 1

Featured Links*

RE: Firewall Client - 20.Feb.2004 1:01:00 AM

tshinder

Posts: 47408
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Matt,

DHCP only works for admins, you should always use DNS to publish your wpad info.

HTH,
Tom

(in reply to matt.saum)

Post #: 2

RE: Firewall Client - 20.Feb.2004 2:05:00 AM

Guest

Why not adding the network policies all users use same internet explorer settings?

(in reply to matt.saum)

Post #: 3

RE: Firewall Client - 20.Feb.2004 12:03:00 PM

tshinder

Posts: 47408
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Unreg,

Yes, you can create Group Policy to assign all users to use autodetection, and then use DNS for the wpad entries.

Thanks!
Tom

(in reply to matt.saum)

Post #: 4

RE: Firewall Client - 20.Feb.2004 3:54:00 PM

matt.saum

Posts: 17
Joined: 19.Feb.2004
From: Toledo,OH
Status: offline

quote:
Originally posted by <unregistered>:
Why not adding the network policies all users use same internet explorer settings?

I am not using AD. [Frown]

(in reply to matt.saum)

Post #: 5

RE: Firewall Client - 20.Feb.2004 4:04:00 PM

matt.saum

Posts: 17
Joined: 19.Feb.2004
From: Toledo,OH
Status: offline

quote:
Originally posted by tshinder:
Hi Matt,

DHCP only works for admins, you should always use DNS to publish your wpad info.

HTH,
Tom

Even though I am using port 8081?.. I read that DNS only works if you use port 80? [Confused]

(in reply to matt.saum)

Post #: 6

RE: Firewall Client - 20.Feb.2004 4:09:00 PM

matt.saum

Posts: 17
Joined: 19.Feb.2004
From: Toledo,OH
Status: offline

I am not using Active Directory, yet.

I read that DNS uses port 80 only. I am using port 8081.

I tried putting an ALIAS entry in the DNS server: WPAD.domain.com (internal use) and pointed it to my isa.domain.com (internal) It didn't work either.

And I am still learning how to use this sight, bear with me. [Confused]

(in reply to matt.saum)

Post #: 7

RE: Firewall Client - 21.Feb.2004 2:14:00 AM

tshinder

Posts: 47408
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Matt,

You are correct! With DNS you must use TCP port 80 to publish autodiscovery information. However, you should NOT run a Web site on the firewall, so there shouldn't be any problems with that.

While its a bit different with ISA 2000, it would be worth checking out the ISA Server 2000 in Education Kit for deatils on how to automatie configs using Wpad.

HTH,
Tom

(in reply to matt.saum)

Post #: 8

RE: Firewall Client - 23.Feb.2004 3:32:00 PM

matt.saum

Posts: 17
Joined: 19.Feb.2004
From: Toledo,OH
Status: offline

I tried to use port 80 but it says the port is in use. I think this is because of my two NIC configuration? [Confused]

(in reply to matt.saum)

Post #: 9

RE: Firewall Client - 24.Feb.2004 12:33:00 AM

tshinder

Posts: 47408
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Matt,

Is IIS installed on the firewall? Is so, just go into the Control Panel and use the Add/Remove programs applet to remove all IIS components.

HTH,
Tom

(in reply to matt.saum)

Post #: 10

RE: Firewall Client - 1.Mar.2004 6:20:00 PM

matt.saum

Posts: 17
Joined: 19.Feb.2004
From: Toledo,OH
Status: offline

I uninstalled the IIS components and everything is fine now. WPAD is now out there, thanks for your help. Is it true about the dhcp(WPAD) method. It only works if the client has local admin priv's? [Smile]