Welcome to ISAserver.org

SecureNAT can´t access google mail

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Web Proxy] >> Web Proxy Client >> SecureNAT can´t access google mail

Page: [1]

Message

<< Older Topic Newer Topic >>

SecureNAT can´t access google mail - 7.Mar.2008 8:35:44 PM

paulo.oliveira

Posts: 792
Joined: 3.Jan.2008
From: Amazonas, Brazil
Status: offline

Hi,

I have an ISA 2006 Std. Ed. set up with a three-homed environment. Internal clients are using IE7.
When they try to access the URL http://www.gmail.com (for example), as SecureNAT client they receive the following message "Internet Explorer cannot display the webpage", but if I configure to use ISA as webproxy (server_name:8080) it works perfectlly.

Anyone know to workaround on this?

Post #: 1

Featured Links*

RE: SecureNAT can´t access google mail - 9.Mar.2008 8:57:59 AM

IanC

Posts: 224
Joined: 11.Jul.2007
From: UK
Status: offline

This would occur if the access rule requires authentication. Unlike Web proxy clients, SecureNAT clients are unable to authenticate so these connection attempts fail.

Ian

_____________________________

Ian Currie

http://www.curriecomputing.com

(in reply to paulo.oliveira)

Post #: 2

RE: SecureNAT can´t access google mail - 9.Mar.2008 12:41:54 PM

elmajdal

Posts: 5060
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline

How Many NICs you have on your ISA Server ? what is their settings IP/GW/DNS ?

how about the secureNet client, what is their NIC Settings ?

Do u have an Internal DNS Server that is able to forward requests to external , ISP, DNS Servers?

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to paulo.oliveira)

Post #: 3

RE: SecureNAT can´t access google mail - 10.Mar.2008 9:22:53 AM

paulo.oliveira

Posts: 792
Joined: 3.Jan.2008
From: Amazonas, Brazil
Status: offline

Hi thank you all for the reply!

Authentication is not enabled, because the other internet sites is working very well (like http://www.microsoft.com).

I have 3 NICs (internal, external and perimeter), about my NIC settings is below:

Windows IP Configuration:

Host Name. . . . . . . . . . . : xxxxx
Primary Dns Suffix. . . . . . . . : mydomain.local
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled . . . . . : Yes
WINS Proxy Enabled . . . . . . . . : Yes
DNS Suffix Search List. . : mydomain.local

Ethernet Adapter External:

Connection-specific DNS Suffix . :
Description. . . . . . . . . . . . . : TEG-PCITXR 32-bit 10/100/1000Mbps PCI Ad
apter
Physical Address. . . . . . . . . . : xx-xx-xx-xx-xx-xx
DHCP Enabled . . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 200.208.xxx.166
Subnet Mask. . . . . . . . : 255.xxx.xxx.248
IP Address. . . . . . . . . . . . : 200.xxx.xxx.165
Subnet Mask. . . . . . . . : 255.xxx.xxx.248
Endereço IP. . . . . . . . . . . . : 200.xxx.xxx.164
Subnet Mask. . . . . . . . : 255.xxx.xxx.248
IP Address. . . . . . . . . . . . : 200.xxx.xxx.162
Subnet Mask. . . . . . . . : 255.xxx.xxx.248
IP Address. . . . . . . . . . . . : 200.xxx.xxx.163
Subnet Mask. . . . . . . . : 255.xxx.xxx.248
Default Gateway . . . . . . . . . . : 200.xxx.xxx.161
NetBIOS over Tcpip. . . . . . . . . : disabled

Ethernet Adapter Perimeter:

Connection-specific DNS Suffix . :
Description. . . . . . . . . . . . . : TEG-PCITXR 32-bit 10/100/1000Mbps PCI Ad
apter
Physical Address. . . . . . . . . . : xx-xx-xx-xx-xx-xx
DHCP Enabled . . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 172.xxx.11.125
Subnet Mask. . . . . . . . : 255.255.255.128
Default Gateway . . . . . . . . . . :
DNS Servers . . . . . . . . . . : 172.xxx.10.1

Ethernet Adapter Internal:

Connection-specific DNS Suffix . :
Description. . . . . . . . . . . . . : Realtek RTL8168/8111 PCI-E Gigabit Ether
net NIC
Physical Address. . . . . . . . . . : xx-xx-xx-xx-xx-xx
DHCP Enabled . . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 172.xxx.10.125
Subnet Mask. . . . . . . . : 255.255.255.128
Default Gateway . . . . . . . . . . :
DNS Servers . . . . . . . . . . : 172.xxx.10.1
Primary WINS Server . . . . . . : 172.xxx.10.1

My internal DNS server forward requests to my external DNS server located on Perimeter.

I appreciate any help!

(in reply to elmajdal)

Post #: 4