Welcome to ISAserver.org

Is it Correct rule for Securenat ISA

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> SecureNAT Client >> Is it Correct rule for Securenat ISA

Page: [1]

Message

<< Older Topic Newer Topic >>

Is it Correct rule for Securenat ISA - 4.Feb.2006 9:07:47 PM

s2002

Posts: 48
Joined: 3.Feb.2006
Status: offline

I want my users to access to internet via ISA (secure Nat)
I have create this rule
Allow access from:local-Internal To:External for:All users
Is it a secure rule? Any comment on this.

Post #: 1

Featured Links*

RE: Is it Correct rule for Securenat ISA - 4.Feb.2006 10:29:35 PM

LLigetfa

Posts: 2184
Joined: 10.Aug.2004
From: fort frances.on.ca
Status: offline

If you cannot control wo has access to what, how can you consider that secure?

_____________________________

The School of Hard Knocks is a mean teacher. She gives the exam before the lesson.

(in reply to s2002)

Post #: 2

RE: Is it Correct rule for Securenat ISA - 5.Feb.2006 4:23:07 AM

s2002

Posts: 48
Joined: 3.Feb.2006
Status: offline

Could you please help me with some advice?

< Message edited by s2002 -- 5.Feb.2006 4:31:17 AM >

(in reply to LLigetfa)

Post #: 3

RE: Is it Correct rule for Securenat ISA - 5.Feb.2006 6:32:36 AM

LLigetfa

Posts: 2184
Joined: 10.Aug.2004
From: fort frances.on.ca
Status: offline

Create specific rules limited to only those protocols and destination sets that are required. If you need anonymous rules for sites like Windows Update, make sure they are above rules that require authentication.
Normally, deny rules should come before allow rules.

_____________________________

The School of Hard Knocks is a mean teacher. She gives the exam before the lesson.

(in reply to s2002)

Post #: 4

RE: Is it Correct rule for Securenat ISA - 7.Feb.2006 12:35:04 AM