Welcome to ISAserver.org

SecureNAT & HTTP/S

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> SecureNAT Client >> SecureNAT & HTTP/S

Page: [1]

Message

<< Older Topic Newer Topic >>

SecureNAT & HTTP/S - 22.Jul.2004 8:04:00 PM

jlyristis

Posts: 5
Joined: 22.Jul.2004
Status: offline

I am using a SecureNAT client to access the internet. Everything works from the command line, like ping, telnet, nslookup, etc. However when I use Internet explorer (Without proxy, which is what I want) I get Error Code 403. The ISA server denied the specified uniform resource locator (URL). (12202).

I have a firewall policy access rule that allows for all outbound traffic destined to external network from this SecureNAT client. Everything works correctly with the exception of IE without the proxy.

Anyone have any ideas???

[ July 22, 2004, 08:30 PM: Message edited by: isablade ]

Post #: 1

Featured Links*

RE: SecureNAT & HTTP/S - 22.Jul.2004 8:44:00 PM

jlyristis

Posts: 5
Joined: 22.Jul.2004
Status: offline

I figured it out eventually.

If require all users to authenticate is selected on the authentication section of the local network web proxy configuration THEN a SecureNAT client without the proxy specified in IE will NOT be able to access the internet. Otherwise with Require All users to authenticate NOT selected, then a SecureNat client can use IE without a proxy server setting.

[ July 22, 2004, 09:30 PM: Message edited by: isablade ]

(in reply to jlyristis)

Post #: 2

RE: SecureNAT & HTTP/S - 23.Jul.2004 2:35:00 PM

tshinder

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Isablade,

That is correct. Only the Web Proxy and Firewall clients can authenticate. The SecureNAT client cannot authenticate. That's why it should be reserved only for published servers and non-MS operating systems.

Good to hear you got it working and thanks for the follow up!

Tom

(in reply to jlyristis)

Post #: 3

RE: SecureNAT & HTTP/S - 6.Oct.2004 11:14:00 AM

LAUSL

Posts: 11
Joined: 6.Oct.2004
From: Hong Kong
Status: offline

Hi isablade,

You say 'Otherwise with Require All users to authenticate NOT selected, then a SecureNat client can use IE without a proxy server setting.', Where policy I need NOT selected All users?

Thanks

(in reply to jlyristis)

Post #: 4