Welcome to ISAserver.org

How Windows authenticated users can access to local web in ISA 2006?

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Firewall] >> General >> How Windows authenticated users can access to local web in ISA 2006?

Page: [1]

Message

<< Older Topic Newer Topic >>

How Windows authenticated users can access to local web... - 19.Jun.2008 1:10:29 AM

koolj_1979

Posts: 1
Joined: 18.Jun.2008
Status: offline

Dear admin,

I have a case of configuring ISA 2006 with a traffic bandwidth tool called BANDWIDTH SPLITTER, then i have some questions would like you to answer or give me some advices:

Thank you for taking care of this!

1. How to let Windows authenticated user access to a local webhost? right now only anonymous user can access and ISA can monitor this kind of session.
2. How to let Windows authenticated user be controlled by BANDWIDTH SPLITTER?

I could not configure things above, i did try some ways as my followings environment:
- We have a domain called fsoft.fpt.vn, and another domain called rac.com.vn
- I have a server installed MS Windows Server 2003 SP2, MS ISA 2006, and BANDWIDTH SPLITTER v1.05. This server has joined domain fsoft.fpt.vn
- This server also has a web host, called FMC (http://10.16.16.198/fmc), located via local IIS, and used local data to be its resources (this is local website)
- We have some computers join the domain, and some not.

--> Expectation: i want to configure all users from both domains (fsoft.fpt.vn and rac.com.vn) can access the web FMC, and be controled traffic bandwidth via BANDWIDTH SPLITTER.

So i did a firewall configuration like this:
- IIS, web host: http://farm4.static.flickr.com/3018/2592225016_d0bbe1d5b8_o.jpg

- ISA firewall configuration:
http://farm4.static.flickr.com/3139/2592226548_89dd62426b_o.jpg
http://farm4.static.flickr.com/3048/2591388485_3da6069deb_o.jpg

- BANDWIDTH SPLITTER configuration: http://farm4.static.flickr.com/3216/2591294869_15d0a1ba2e_o.jpg

- Then access the webhost FMC, it always responds TIME OUT: http://farm4.static.flickr.com/3120/2591388667_ac8d366a4e_o.jpg

- When add ALL USERS to this firewall, the result comes OK, like this:
http://farm4.static.flickr.com/3122/2591388903_0557c789fa_o.jpg
http://farm4.static.flickr.com/3051/2591389111_296fce279d_o.jpg

And i do not know why the Windows authenticated users of both domains, also logged in from join-domain and not-join-domain computers (if ALL USERS not added), could not access to this local site, or be controlled bandwidth by BS, FMC. Can you help me?

Thanks for sharing me experiences!
I appreciate all your comments to help!
KJ.

Post #: 1

Featured Links*

RE: How Windows authenticated users can access to local... - 30.Jun.2008 9:27:38 AM

tshinder

Posts: 47010
Joined: 10.Jan.2001
From: Texas
Status: offline

I think what you want to do here is use Direct Access for internal clients. That is to say, you don't want to bouce off the firewall to reach an internal site.

Configure Direct Access for Web Proxy and Firewall clients in the Properties dialog box for the ISA Firewall Network from which the clients are connecting from.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to koolj_1979)

Post #: 2