Welcome to ISAserver.org

SNAT and Web Filtering... has this topic been beaten to death yet?

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> SecureNAT Client >> SNAT and Web Filtering... has this topic been beaten to death yet?

Page: [1]

Message

<< Older Topic Newer Topic >>

SNAT and Web Filtering... has this topic been beaten to... - 26.May2006 4:07:50 PM

jtnf

Posts: 20
Joined: 24.May2006
Status: offline

I think i've read every thread on SecureNAT and web filtering (Websense ISAPI filter, FWIW.) I'm seeing a lot of conflicting "that simply does not work" and "just do this and it works."
Unfortunately, I'm up to about 15 hours webexing with WebSense (LITERALLY!) and all of the techs I've spoken to don't seem to have seen this problem before (despite posts here to the contrary

) I discovered that this interraction between Websense and ISA 2004 is a known issue sometime aroung hour fourteen.
More unfortunate is the fact that my clients are being granted access to the 'net unfettered, exposing us to a fair risk.

My topology is complex, with clients behind one or several routers. I have only one test client on the same segment as the ISA server, but all other clients are at least one hop away.

The vast majority of my clients are Windows/IE6, but I've got a fair number of UNIX hosts, or Windows/Firefox users (such as myself.) I'll probably enforce the proxy with a GPO and blocked non-proxied traffic, but Firefox and UNIX users will be able to bypass Websense. I've also been unable to get Firefox to proxy through ISA 2004.

Has this one been beaten to death yet? If so, is there a summary or tutorial document that I'm just not seeing?

Post #: 1

Featured Links*

RE: SNAT and Web Filtering... has this topic been beate... - 27.May2006 12:46:13 AM

jtnf

Posts: 20
Joined: 24.May2006
Status: offline

Hold the phone! I've got it all working... SNAT, Proxy, WebSense, (austensibly) firewall client too. I'll post under a different heading to summarize.

(in reply to jtnf)

Post #: 2

RE: SNAT and Web Filtering... has this topic been beate... - 27.May2006 2:41:58 PM

jtnf

Posts: 20
Joined: 24.May2006
Status: offline

I summarized my experiences in "HTTP Filtering" (A post whose title begins "IT WORKS!") if anybody finds this thread and is looking for an answer.

http://forums.isaserver.org/IT_WORKS!_My_50_man-hour_ordeal_with_ISA2004_SP2_%26_WebSense/m_2002017818/tm.htm

< Message edited by jtnf -- 27.May2006 5:03:36 PM >

(in reply to jtnf)

Post #: 3