Welcome to ISAserver.org

Firewall client bypasses Surf Control

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Misc.] >> 3rd Party Add-ons >> Firewall client bypasses Surf Control

Page: [1]

Message

<< Older Topic Newer Topic >>

Firewall client bypasses Surf Control - 6.Jul.2006 12:57:40 AM

dekkar

Posts: 49
Joined: 2.Nov.2001
From: sydney, australia
Status: offline

I posted this in another group, but I think it should have been posted here:

Hello all,

I have ISA 2004 on a Win2k3 box, I have some users (who need to stream using quicktime and realplayer) connected to the internet via the Firewall Client. All of my other users just have their internet settings pointing to the proxy server.

We also have a surf control box inbetween the ISA server and the internet. (blocking unwanted sites/mail)

Now here is the problem:

With the Firewall client on, users are able to somehow bypass the surf control restictions and browser anywhere.

With the proxy settings activated (Firewall Client turned off), users cant stream.

My ideal situation is to do away with the firewall client, and have all users able to stream via proxy settings. But I dont know if this is possible.

My other question is, why/how are machines with firewall client on able to bypass the Surf Control box??

Finally, I am getting errors in the event log that look like:

The SurfControl Manual Categories subscription has expired

The General List subscription has expired

The SurfControl VCA Categories subscription has expired

Everything still works OK as far as I know, and I checked our subscriptions, they are all current.

I hope I have explained the situation correctly, any help would be appreciated!

Thanks,
Dekkar

Post #: 1

Featured Links*

RE: Firewall client bypasses Surf Control - 7.Jul.2006 3:04:29 AM

dekkar

Posts: 49
Joined: 2.Nov.2001
From: sydney, australia
Status: offline

-- UPDATE --

I have found that Surfcontrol on the ISA server need SP1 applied in order to filter ISA clients. Which will be applied soon.

I still havent worked out the deal with those errors, or streaming via proxy settings instead of firewall client.

Thanks,
Dekkar

(in reply to dekkar)

Post #: 2