Welcome to ISAserver.org

Firewall Client Disabled --> Can't browse the webs

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2000 General] >> General >> Firewall Client Disabled --> Can't browse the webs

Page: [1]

Message

<< Older Topic Newer Topic >>

Firewall Client Disabled --> Can't browse the webs - 10.Mar.2008 5:37:34 AM

klipschthx

Posts: 1
Joined: 10.Mar.2008
Status: offline

Hello Guys,

I hope this fits into this forum. I've recently changed the external IP address of the server and rerun the ISA configuration wizard. After the wizard completed, I can no longer make an outgoing Cisco VPN connection from client machines. Below are some interesting observations.

- Brefore the IP change, I had to disable the firewall client before making a connection from the Cisco VPN client.

- Before the IP change, I could use Firefox to browse non-secure web sites (http) when the firewall client was disabled (IE wasn't applicable because it was using proxy). After the IP change, if I disable the firewall client, I can't browse any web site with Firefox at all.

Right it seems that the client machines will lose the communication to the server when the firewall client is disabled, which is not good because I need to disable the firewall before making the connection. And I have a feeling that this has something to do with the broken VPN because all the port settings for the VPN on the ISA server are still in place. Any ideas?

Post #: 1

Featured Links*

RE: Firewall Client Disabled --> Can't browse the webs - 17.Mar.2008 1:22:25 AM

AHIT

Posts: 1561
Joined: 22.Jul.2002
From: Sydney, Australia
Status: offline

Suspect you'll need to enable packet filtering for the outbound VPN.
This may also have 'disabled' standard NAT access which stops the (no proxy setting) Firefox client.

See this article for hints : http://www.isaserver.org/tutorials/Allowing_Outbound_PING_and_PPTP_Connections.html

_____________________________

http://www.ahit.com.au/isa
(Previous nick: Tolk)

(in reply to klipschthx)

Post #: 2