Welcome to ISAserver.org

Firewall Client changes first part of URL to IP

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Firewall] >> Firewall Client >> Firewall Client changes first part of URL to IP

Page: [1]

Message

<< Older Topic Newer Topic >>

Firewall Client changes first part of URL to IP - 12.Mar.2008 6:52:18 AM

matt@adept

Posts: 1
Joined: 12.Mar.2008
Status: offline

Hi All,

First post, long time reader. Gosh I sound like something from Grosse Point Blank, anyway...

I have elected to install the firewall client on all staff machines so as to enable authentication so that all protocols can be monitored (such as RDP etc) However when I do this the rules that block URL's fail as the first portion of the URL (*.facebook.* for instance) is converted into an IP address, which bypasses the URL set check. What am I doing wrong?

Cheers in advance,

Matt

_____________________________

Security - Together we'll crack it.

Post #: 1

Featured Links*

RE: Firewall Client changes first part of URL to IP - 1.Jul.2008 8:00:30 AM

tshinder

Posts: 47010
Joined: 10.Jan.2001
From: Texas
Status: offline

Make sure that the Web Proxy client configuration is correct on the clients.

Also, are you creating domain name sets or URL sets?

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to matt@adept)

Post #: 2

RE: Firewall Client changes first part of URL to IP - 1.Jul.2008 5:51:04 PM

elmajdal

Posts: 4959
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline

Hi,

you can not use this format : *.facebook.*

read this article by Tom Shinder : Using ISA 2004 Firewall Domain Name Sets to Control Internet Access

< Message edited by elmajdal -- 1.Jul.2008 5:53:49 PM >

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to matt@adept)

Post #: 3

RE: Firewall Client changes first part of URL to IP - 2.Jul.2008 9:54:17 AM

tshinder

Posts: 47010
Joined: 10.Jan.2001
From: Texas
Status: offline

Nice article :)

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to elmajdal)

Post #: 4

RE: Firewall Client changes first part of URL to IP - 2.Jul.2008 5:20:27 PM

elmajdal

Posts: 4959
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline

Yah, one of the most requested articles

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to tshinder)

Post #: 5