Welcome to ISAserver.org

Firewall Client error

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Firewall] >> Firewall Client >> Firewall Client error

Page: [1]

Message

<< Older Topic Newer Topic >>

Firewall Client error - 13.Mar.2008 11:05:13 AM

St Peter

Posts: 2
Joined: 10.Nov.2003
From: Albany
Status: offline

I really need someones help to figure this one out!!
Our company is set up like this:
Domain A -----> Domain B ----> Internet

Our users and computers are in domain A - Domain B is our Dmz which is where our Enterprise ISA 2006 array is. There is a transitive trust setup between the 2 doamins- everything works great. Now here is the big issue!

We were purchased by a Parent company- they are going to migrate all users from Domain A into thier Domain - (lets call it Domain z) - Now they setup a transitive trust between Domain A and Domain Z - however they do not want to create a trust from Doamin Z to Domain B. The migrated users are logging into Domain Z on thier workstation that is Domain Z - we have configured the Isa server to allow users from the Domain Z to have access out thru the ISA server to the internet. At the same time we still have the users in Domain A going out thru the Isa server.
**** However our issue is the Firewall Client- when ever a user sitting in Domain Z needs to access the firewall services the firewall client on the workstation gets a red X - and states cannot authenticate to the ISA server.

IF anyone can help it would be greatly appreciated! Unfortunately we have no choice on this migration and they moving forward no matter what - so there is no going back!

Thanks

Post #: 1

Featured Links*

RE: Firewall Client error - 1.Jul.2008 8:02:38 AM

tshinder

Posts: 47010
Joined: 10.Jan.2001
From: Texas
Status: offline

Create a one-way trust so that the firewall trusts the user domain, but that the user domain does not trust the firewall's domain.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to St Peter)

Post #: 2