Welcome to ISAserver.org
Forums |
Register |
Login |
My Profile |
Inbox |
RSS 
|
My Subscription |
My Forums |
Address Book |
Member List |
Search |
FAQ |
Ticket List |
Log Out
Firewall client disabled
|
Users viewing this topic:
none
|
Logged in as: Guest
|
Login  | |
|
Firewall client disabled - 4.Jun.2007 12:42:32 AM
|
|
|
danieltan07
Posts: 51
Joined: 5.Feb.2007
From: Malaysia
Status: offline
|
Whenever i want to web browsing or any online activity, FWC will be disabled. Isa server can be pinged and access through UNC. This is isa 2004 sp3. Pls advise.Thanks
|
|
|
|
|
RE: Firewall client disabled - 4.Jun.2007 2:18:55 AM
|
|
|
elmajdal
Posts: 5074
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline
|
Hi,
Are both, ISA Server and the client joined to the same domain ??
Is the user logged in to the domain ??
_____________________________
Tarek Majdalani
MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8
|
|
|
|
|
RE: Firewall client disabled - 4.Jun.2007 2:59:08 AM
|
|
|
danieltan07
Posts: 51
Joined: 5.Feb.2007
From: Malaysia
Status: offline
|
We don't have domain. I found that in my ISA http rule if i change from authenticated users to all users then FWC can be connected and online.
|
|
|
|
|
RE: Firewall client disabled - 4.Jun.2007 4:31:09 AM
|
|
|
danieltan07
Posts: 51
Joined: 5.Feb.2007
From: Malaysia
Status: offline
|
Sorry pls ignore the earlier message. The isa server is a member server and user log into the domain. As soon as open browser it will be disabled.
|
|
|
|
|
RE: Firewall client disabled - 4.Jun.2007 8:51:21 AM
|
|
|
justmee
Posts: 505
Joined: 14.May2007
Status: offline
|
Hi Daniel,
what does the FWC says? It cannot find ISA ?
also if you set up manually the FWC to point to ISA what's the result?
Best Regards!
|
|
|
|
|
RE: Firewall client disabled - 4.Jun.2007 10:59:28 AM
|
|
|
danieltan07
Posts: 51
Joined: 5.Feb.2007
From: Malaysia
Status: offline
|
FWC cannot authenticated with isa server. I've been manually set to isa server. If i use FWC tools, it reports that authentication error. I can ping isa server and it can get isa server name.
|
|
|
|
|
RE: Firewall client disabled - 4.Jun.2007 1:00:05 PM
|
|
|
elmajdal
Posts: 5074
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline
|
Hi Daniel,
you said quote:
This is isa 2004 sp3.
did you have this problem before installing SP3 ??
and how many NICs do you have on your ISA ? and whats their config ?
_____________________________
Tarek Majdalani
MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8
|
|
|
|
|
RE: Firewall client disabled - 4.Jun.2007 9:26:17 PM
|
|
|
danieltan07
Posts: 51
Joined: 5.Feb.2007
From: Malaysia
Status: offline
|
No. I have 2 nics for edge network. One is internal and external each.Isa is linked to a router and client is linked to internal.
|
|
|
|
|
RE: Firewall client disabled - 4.Jun.2007 11:00:35 PM
|
|
|
danieltan07
Posts: 51
Joined: 5.Feb.2007
From: Malaysia
Status: offline
|
Ever heard of SP3 got problem ? When i use FWC tool to troubleshoot, it returns error as below. But i can use Securenat and web proxy.
Firewall Client Agent service:
Firewall Client Agent service is responsive
ISA Server:
Error: Firewall Client is disabled, check configuration
Result: The command failed and was not completed.
Action: Set ISA Server
User: current
Application: all applications
FwcTool failed. Error code 5, 70, 0x800706C6
Error Description: The array bounds are invalid.
|
|
|
|
|
RE: Firewall client disabled - 5.Jun.2007 4:42:54 AM
|
|
|
danieltan07
Posts: 51
Joined: 5.Feb.2007
From: Malaysia
Status: offline
|
I've revert to SP1 and it also won't works.For my FWC, if i use ip to connect to isa server also cannot. On the fwc message, it is disabled, isa server is not accessible. Do you mean run this command on server or client ? Thanks
|
|
|
|
|
RE: Firewall client disabled - 5.Jun.2007 4:54:14 AM
|
|
|
elmajdal
Posts: 5074
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline
|
is this happening on ALL clients ?? or only on a particular one ?
quote:
Do you mean run this command on server or client ?
on the client
_____________________________
Tarek Majdalani
MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8
|
|
|
|
|
RE: Firewall client disabled - 5.Jun.2007 5:56:48 AM
|
|
|
danieltan07
Posts: 51
Joined: 5.Feb.2007
From: Malaysia
Status: offline
|
All clients as far as i have tested. I've run that command but still won't connect to isa. I just enter the netbios name.Error in fwc test server is:The specified server returned an unresolved redirected server name. Any config wrong in isa server ?
|
|
|
|
|
RE: Firewall client disabled - 5.Jun.2007 9:08:22 AM
|
|
|
elmajdal
Posts: 5074
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline
|
quote:
I just enter the netbios name
what about if you entered the IP of the ISA Server ( Internal NIC IP ) ?
_____________________________
Tarek Majdalani
MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8
|
|
|
|
|
RE: Firewall client disabled - 5.Jun.2007 10:28:47 PM
|
|
|
danieltan07
Posts: 51
Joined: 5.Feb.2007
From: Malaysia
Status: offline
|
IP also cannot. When i first setup, it can detect netbios and ip. Then suddenly it cannot detect netbios name and also ip.
|
|
|
|
|
RE: Firewall client disabled - 6.Jun.2007 4:50:14 AM
|
|
|
justmee
Posts: 505
Joined: 14.May2007
Status: offline
|
Hi Daniel,
take a look at this.
< Message edited by justmee -- 6.Jun.2007 4:51:17 AM >
|
|
|
|
|
RE: Firewall client disabled - 6.Jun.2007 5:41:59 AM
|
|
|
danieltan07
Posts: 51
Joined: 5.Feb.2007
From: Malaysia
Status: offline
|
Hi, i do not use auto discovery in fwc. i set it manually to the server name or ip.
|
|
|
|
|
RE: Firewall client disabled - 6.Jun.2007 6:56:08 AM
|
|
|
justmee
Posts: 505
Joined: 14.May2007
Status: offline
|
So are you saying that before applying SP3 it was working?
And after that without any ISA changes it is not working?
Have you checked that registry entry from that link?
I know it does not seem to apply because you are not using autodiscovery(by the way why are you not using it?) but it might worth giving it a try(although it sound dumb).
You said:
quote:
I found that in my ISA http rule if i change from authenticated users to all users then FWC can be connected and online.
And that your FWC displayes Disabled: Cannot authenticate to ISA Server
You did not checked Require all users to authenticate either?
|
|
|
|
|
RE: Firewall client disabled - 6.Jun.2007 9:31:44 PM
|
|
|
danieltan07
Posts: 51
Joined: 5.Feb.2007
From: Malaysia
Status: offline
|
Previously i used to work on SP1 and it works. After i installed SP3, initially it works a while but then it stop working. Then i modify http authentication rule to all user then FWC working again. But soon after that it won't works anymore. If i use fwc tools to trobleshoot the connection, it has error as below
Firewall Client Agent service:
Firewall Client Agent service is responsive
ISA Server:
Error: Firewall Client is disabled, check configuration
Result: The command failed and was not completed.
Reason for not using auto detect because i still not very good in that. Maybe later i'll try on it. Do i need to have dhcp to use auto discovery ?
|
|
|
|
 New Messages |
 No New Messages |
 Hot Topic w/ New Messages |
 Hot Topic w/o New Messages |
 Locked w/ New Messages |
 Locked w/o New Messages |
|
 Post New Thread
Reply to Message
Post New Poll
Submit Vote
Delete My Own Post
Delete My Own Thread
Rate Posts |
|
Printable Version
