Welcome to ISAserver.org

Multiply domain users authentication for access rule

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Firewall] >> Access Policies >> Multiply domain users authentication for access rule

Page: [1]

Message

<< Older Topic Newer Topic >>

Multiply domain users authentication for access rule - 31.Oct.2006 10:49:29 AM

mark.ka

Posts: 2
Joined: 13.Sep.2006
Status: offline

Hi,

Is it possible for ISA 2006, to authenticate outgoing requests from
internal network to the Internet, while internal nework contains more than 1
Active Directory domain? Like ISA does it in publishing rule using multiply
LDAP servers. I see that it's impossible to use LDAP authenticated users in
access rule.

Any help will be greatly appreciated,
Mark Kaplan

Post #: 1

Featured Links*

RE: Multiply domain users authentication for access rule - 15.Nov.2006 12:39:52 PM

tshinder

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Mark,

Only if there is a trust relationship between the domains.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to mark.ka)

Post #: 2

RE: Multiply domain users authentication for access rule - 22.Nov.2006 2:14:31 AM

mark.ka

Posts: 2
Joined: 13.Sep.2006
Status: offline

Hi Tom,
Thank you for response. On enote - it probably means that ISA computer itself should member of domain (one in the trusted group of domains) and not of a workgroup. Am I right?
THA,
Mark

(in reply to tshinder)

Post #: 3

RE: Multiply domain users authentication for access rule - 22.Nov.2006 11:48:55 AM

tshinder

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Mark,

Absolutley right!

I always join the ISA Firewall to the domain, unless the ISA Firewall is part of a back to back Firewall configuration and its a front end firewall, in which case I used the ISA Firewall as a stateful packet inspection firewall.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to mark.ka)

Post #: 4