Welcome to ISAserver.org

It no loner supportsFWC and Vista

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Firewall] >> Firewall Client >> It no loner supportsFWC and Vista

Page: [1]

Message

<< Older Topic Newer Topic >>

It no loner supportsFWC and Vista - 11.Sep.2006 9:14:02 AM

leslie

Posts: 61
Joined: 31.Jul.2003
Status: offline

Hi,
I know this probably the wrong place for this but its also the place I have got the most help!! Has anyone tried(or any idea) of what MS is trying with Vista RC1? It doent support the FWC at all. How do they expect anyone who uses ISA Server to test Vista like this? Does anyone know of plans for a patch /solution ???

Post #: 1

Featured Links*

RE: It no loner supportsFWC and Vista - 11.Sep.2006 3:30:36 PM

wdekler

Posts: 64
Joined: 17.Sep.2002
Status: offline

You can use the ISA 2004 client, take a look at this thread:

http://forums.isaserver.org/m_2002018351/mpage_1/key_vista/tm.htm#2002018351

Wanne.

(in reply to leslie)

Post #: 2

RE: It no loner supportsFWC and Vista - 11.Sep.2006 5:17:27 PM

tshinder

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline

Hey guys,

That's right. You have to use the ISA 2004 client right now. You'll see error messages when installing, but it seems to work fine.

Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to wdekler)

Post #: 3

RE: It no loner supportsFWC and Vista - 16.Sep.2006 7:40:04 AM

leslie

Posts: 61
Joined: 31.Jul.2003
Status: offline

Hi,
I did manage to use the 2004 FWC as suggested but with vista (at least) I notice a strange thing. Programs that use the FWC cannot authenticate.....If I join the vista machine to my domain and logon to the domain, no problem. XP never did this. I was hoping(as usual) that Tom has a suggestion as it doesnt(or shouldnt) seem to be a vista problem

(in reply to tshinder)

Post #: 4

RE: It no loner supportsFWC and Vista - 18.Sep.2006 3:40:15 PM

tshinder

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Leslie,

How would the Firewall client authenticate if the machine isn't joined to the domain?

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to leslie)

Post #: 5

RE: It no loner supportsFWC and Vista - 18.Sep.2006 4:00:38 PM

leslie

Posts: 61
Joined: 31.Jul.2003
Status: offline

Hi Tom,
I feel rather stupid now but with XP, even if the machine is not joined to the domain , depending on the password/user name stored in IE(for example), the client authenticates.....I did use several workgroup computers on my netork with this setup. Am i Missing something??

(in reply to tshinder)

Post #: 6

RE: It no loner supportsFWC and Vista - 18.Sep.2006 4:03:22 PM

tshinder

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Leslie,

OK, so you mirrored the user accounts on the ISA Firewall? So that the user account on the workstation was the same as the user account entered in the ISA Firewall's local SAM database?

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to leslie)

Post #: 7

RE: It no loner supportsFWC and Vista - 19.Sep.2006 9:04:21 AM

leslie

Posts: 61
Joined: 31.Jul.2003
Status: offline

Well...probably. I dont know enough about this I guess. A workgroup computer on my network these days (which we have only a few of) is (obviously) not joined to the domain. The user of this computer uses the internet via our isa server by configuring IE as a web proxy client. On first run, the user enters the domain user account and password. Subsequently, for aplications like outlook express for example, the FWC authenticates automatically. Doesnt happen in Vista.
Thanks so much for your replies

(in reply to tshinder)

Post #: 8

RE: It no loner supportsFWC and Vista - 19.Sep.2006 3:50:30 PM

tshinder

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Leslie,

Only the Web proxy client will ask for credentials, the Firewall client won't do it.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to leslie)

Post #: 9

RE: It no loner supportsFWC and Vista - 20.Sep.2006 6:19:17 AM

leslie

Posts: 61
Joined: 31.Jul.2003
Status: offline

Hi,
I realise that. I meant, when the web proxy settings have been configured with the domain user account and password, the FWC authenticates automatically.

(in reply to tshinder)

Post #: 10

RE: It no loner supportsFWC and Vista - 22.Sep.2006 11:12:36 PM

the_ape

Posts: 29
Joined: 4.Apr.2002
Status: offline

The ISA 2004 client seems to work fine for everything except for HTTP traffic, I used to have my box setup to use the FW client for all traffic including HTTP, then not set a Proxy server in ie/mozilla. Just made life easier working in multi locations.

However I now need to set a Proxy server in HTTP clients else it does not work? odd, because FTP/POP3/SMTP/etc.... work fine.

I think Vista has a new way of doing HTTP traffic for security etc, so it has some sort of internal proxy that does some check's.

Strange, but I'll live with it until a Vista complient client is released.

(in reply to leslie)

Post #: 11

RE: It no loner supportsFWC and Vista - 31.Dec.2006 12:10:12 PM

elmajdal

Posts: 5074
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: online

quote:

I think Vista has a new way of doing HTTP traffic for security etc, so it has some sort of internal proxy that does some check's.

Strange, but I'll live with it until a Vista complient client is released.

its available now , check this : http://forums.isaserver.org/m_2002035371/mpage_1/key_/tm.htm#2002035371

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to the_ape)

Post #: 12