Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

ISA 2004 Server and Windows Time

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2004 General ] >> General >> ISA 2004 Server and Windows Time Page: [1]
Login
Message << Older Topic   Newer Topic >>
ISA 2004 Server and Windows Time - 12.Aug.2008 3:21:12 PM   
okontoe

 

Posts: 5
Joined: 22.Nov.2004
Status: offline
I have been struggling to get the following issue fixed ...

Currently, I have two ISA 2004 Servers in a DMZ.  Both ISA 2004 Servers are configured as Reverse Proxies (Single NIC Interface) and are NOT members of an Active Directory domain (standalone Workgroup servers).  Also, both ISA Servers are configured with Web Published Rules to allow access to our Outlook Web Access Front-end Servers.

The issue is that both ISA 2004 Servers report the wrong time.   As a result, I'm trying to set up Windows Time on both ISA 2004 Servers to communicate with our Active Directory Domain Controller (PDC emulator role) on our enterprise network through a firewall.   I cannot get the time synced up.

I have confirmed our firewall allows 123/UDP traffic to pass through both ways.  I've tried editing the System Policy under the Firewall Policy to allow NTP or 123 traffic to pass through the ISA Server.

Does anyone have any suggestions how to get this working correctly?

Thank you in advance.
Hornet
Post #: 1
RE: ISA 2004 Server and Windows Time - 12.Aug.2008 5:14:03 PM   
pwindell

 

Posts: 782
Joined: 12.Apr.2004
From: Taylorville, IL
Status: offline
Make them domain members and the time will sync without doing anything.  They will also be more secure in general.

1. Export the ISA Config to a file
2. Uninstall ISA
3. Join machine to the Domain
4. Reinstall ISA
5. Import the save Configuration

Debunking the Myth that the ISA Firewall Should Not be a Domain Member
http://www.isaserver.org/tutorials/Debunking-Myth-that-ISA-Firewall-Should-Not-Domain-Member.html


_____________________________

Phillip Windell
www.wandtv.com

(in reply to okontoe)
Post #: 2
RE: ISA 2004 Server and Windows Time - 12.Aug.2008 7:07:02 PM   
Rotorblade

 

Posts: 963
Joined: 27.Feb.2007
Status: offline
Other option, script it and run under task manager to update from the PDU/NTP server.

RB

_____________________________

David Melvin
Ohio
MCSE: Security 2003, MCSA:Security 2003

(in reply to okontoe)
Post #: 3
RE: ISA 2004 Server and Windows Time - 13.Aug.2008 9:32:00 AM   
pwindell

 

Posts: 782
Joined: 12.Apr.2004
From: Taylorville, IL
Status: offline
Hi guy,

Ohio?  Heck, I've been through Ohio enough over the years I've probably drove past your house a few times and didn't know it.


_____________________________

Phillip Windell
www.wandtv.com

(in reply to Rotorblade)
Post #: 4

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2004 General ] >> General >> ISA 2004 Server and Windows Time Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts