Welcome to ISAserver.org

How to lock down access

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Firewall] >> Firewall Client >> How to lock down access

Page: [1]

Message

<< Older Topic Newer Topic >>

How to lock down access - 21.Feb.2008 2:48:14 PM

wlazzell

Posts: 17
Joined: 22.Jan.2008
Status: offline

Hello,
When we were running ISA2000, we had a group in AD called Internet Users which allowed Internet access through ISA2000. When we went to ISA2006, the person who installed this could never get this to work. When we restrict our rule to allow only the user group "Internet Users", then people get prompted for their user name and password (even though integrated authentication is selected), but they never connect. Any ideas on what to try next?

Post #: 1

Featured Links*

RE: How to lock down access - 22.Feb.2008 10:16:38 AM

gbarnas

Posts: 147
Joined: 27.Apr.2005
From: New Jersey
Status: offline

Is your ISA server a member of your domain? If it isn't, it will have no point of reference for authentication. If your users are authenticating as "jdoe", again, without a local "jdoe" account on ISA, access will not be granted. Try "MyDomain\jdoe" format when authenticating and see if that makes a difference.

Best practice, however, will be to insure that ISA is a domain member. BEWARE - joining ISA to a domain after installation will not automatically configure all the appropriate system policies. You might be better off to export your configuration, uninstall ISA, join the domain, reinstall ISA and import your configuration. Export your individual configuration parameters so you don't restore the non-domain system policies.

Glenn

(in reply to wlazzell)

Post #: 2

RE: How to lock down access - 25.Feb.2008 3:09:18 PM