Welcome to ISAserver.org

Isa can access web

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 General ] >> General >> Isa can access web

Page: [1]

Message

<< Older Topic Newer Topic >>

Isa can access web - 5.Sep.2008 7:38:02 AM

gazy007

Posts: 26
Joined: 29.Aug.2008
Status: offline

Hi guys if anyone can tell me My isa 2004 can access internet but there is rule for it to access it and I have checked everything but still could not work out how come it can access Internet. Please advise.

Post #: 1

Featured Links*

RE: Isa can access web - 5.Sep.2008 12:37:58 PM

pwindell

Posts: 782
Joined: 12.Apr.2004
From: Taylorville, IL
Status: offline

You need to explain this a lot more clearly.

Also just because you created a rule doesn't mean the rule is correct so we need to know the exact specs of any rules that might be relevant to the situation.

_____________________________

Phillip Windell
www.wandtv.com

(in reply to gazy007)

Post #: 2

RE: Isa can access web - 5.Sep.2008 5:37:57 PM

gazy007

Posts: 26
Joined: 29.Aug.2008
Status: offline

I made an access rule for local host allow rule to access internet allowed all protocols for extenal then I downloaded windows update after update I deleted the access rule but still my isa server can connect to internet. As i explained it should not connect as there is no rule for isa server(local host) to connect on the internet but it still does.
I need to understand which rule is allowing it to go on the web.

(in reply to pwindell)

Post #: 3

RE: Isa can access web - 5.Sep.2008 5:40:53 PM

pwindell

Posts: 782
Joined: 12.Apr.2004
From: Taylorville, IL
Status: offline

Use the monitoring log to view the traffic.

Look for entries from LocalHost to External that say they are "allowed". Then look at the Rule that the entry says "allowed" it.

_____________________________

Phillip Windell
www.wandtv.com

(in reply to gazy007)

Post #: 4

RE: Isa can access web - 5.Sep.2008 7:01:22 PM

elmajdal

Posts: 5074
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: online

Hi,

This is enabled by a System Policy.

Check my article here : Allowing Internet Access From ISA Server Machine

and to understand all system policies, check this :

http://www.isaserver.org/tutorials/Editing-ISA-2004-system-policy-Part1.html

http://www.isaserver.org/tutorials/Editing-ISA-2004-system-policy-Part2.html

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to pwindell)

Post #: 5

RE: Isa can access web - 15.Sep.2008 4:10:22 PM

gazy007

Posts: 26
Joined: 29.Aug.2008
Status: offline

Tarek it worked and thanks alot for the tutorial it was very useful. Thanks again.

(in reply to elmajdal)

Post #: 6

RE: Isa can access web - 15.Sep.2008 5:56:25 PM

elmajdal

Posts: 5074
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: online

Great !

Glad that it worked, and thanks for the follow up

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to gazy007)

Post #: 7