Welcome to ISAserver.org
Forums |
Register |
Login |
My Profile |
Inbox |
RSS 
|
My Subscription |
My Forums |
Address Book |
Member List |
Search |
FAQ |
Ticket List |
Log Out
SecureNAT client on PC and Mac
|
Users viewing this topic:
none
|
Logged in as: Guest
|
Login  | |
|
SecureNAT client on PC and Mac - 10.Jan.2002 10:19:00 PM
|
|
|
Xuser
Posts: 205
Joined: 29.Jan.2002
From: Canada
Status: offline
|
I cannot setup as SecureNAT client on our PC and Mac computers. Web proxy or Firewall clients on PC is ok. Web Proxy on Macs are also good. What could be wrong? Is this an ISA Server issue? I've already gone through our packet filters etc and they seem good. In our network, we have the default gateway set to point to our IBM router that is being used for SAP. Pls Help!
|
|
|
|
RE: SecureNAT client on PC and Mac - 11.Jan.2002 10:23:00 AM
|
|
|
tshinder
Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline
|
Hi X, Remember that the SecureNAT client has to resolve its own Internet host names because the ISA Server does not do that for the SecureNAT client. HTH,
Tom ------------------
http://www.isaserver.org/shinder/
 
Get It Here!
|
|
|
|
RE: SecureNAT client on PC and Mac - 11.Jan.2002 4:11:00 PM
|
|
|
Xuser
Posts: 205
Joined: 29.Jan.2002
From: Canada
Status: offline
|
Yes, that has already been taken care of but still no go. Do you know of any 3rd party ISA Server firewall client for Macs? If so, that will be a possible solution.
|
|
|
|
|
RE: SecureNAT client on PC and Mac - 22.Jan.2002 4:12:00 PM
|
|
|
Xuser
Posts: 205
Joined: 29.Jan.2002
From: Canada
Status: offline
|
Does anyone here knows what could be wrong? I have the Mac configured as Web Proxy client and I can browse the net but no go when I configured the Mac as SecureNAT client. Therefore, my "Fetch" FTP program and Hotline are not working for me. Help!
|
|
|
|
RE: SecureNAT client on PC and Mac - 22.Feb.2002 6:08:00 PM
|
|
|
Xuser
Posts: 205
Joined: 29.Jan.2002
From: Canada
Status: offline
|
Got it working already, thanks.
|
|
|
|
RE: SecureNAT client on PC and Mac - 22.Feb.2002 6:13:00 PM
|
|
|
tshinder
Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline
|
Hi X,
So what was the problem with the Macs?
Thanks!
Tom
|
|
|
|
|
RE: SecureNAT client on PC and Mac - 22.Feb.2002 6:31:00 PM
|
|
|
Xuser
Posts: 205
Joined: 29.Jan.2002
From: Canada
Status: offline
|
It was a SecureNAT client configuration issue on the ISA Server. Nothing to do with the Mac because even my PC didn't work.
After calling Microsoft, the engineer had me disabled all Protocol rules in Access Policy.
Because I had internet access only for a group called, "Internet Users". Protocol rules and Site and Content rules were for this group only, so only users in this group can access the internet. However, our two Mac users were also member of this "Internet Users" group, so they were not able to access the net because they are SecureNAT clients. You would think that this should not have prevented them from accessing the internet but it did. So, I had to separately configure Protocol rules for SecureNAT clients only. Now, I'm stuck with how to prevent only SecureNAT clients from accessing a particular website.
|
|
|
|
|
RE: SecureNAT client on PC and Mac - 23.Mar.2002 2:02:00 AM
|
|
|
rcspang
Posts: 21
Joined: 7.Feb.2002
From: Norfolk, VA
Status: offline
|
I just installed SBS 2000 and had several Macs involved on the network. I had the same problem and noticed the small print on the web page that ISA Server was not allowing access to the internet. Until then, I assumed that it just was not working, but the small print told me that it was a permissions 'thing'.
I found Q293427 that nailed the problem!
|
|
|
|
|
RE: SecureNAT client on PC and Mac - 1.Nov.2002 4:59:00 PM
|
|
|
Sheila
Posts: 41
Joined: 14.Nov.2001
From: Harrison, OH USA
Status: offline
|
I have a mac that I setup as a SecureNat client and am unable to access anything on the internet. I've followed Tom's SecureNat setup guide, and have setup a protocol rule that applies to the client set. But I keep getting a page cannot be displayed 403 error. The client DNS is set to our internal DNS server.
Any ideas?
Thanks,
Sheila
|
|
|
|
RE: SecureNAT client on PC and Mac - 1.Nov.2002 6:14:00 PM
|
|
|
tshinder
Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline
|
Hi Sheila,
Are you requiring authentication for outbound access?
Thanks!
Tom
|
|
|
|
|
RE: SecureNAT client on PC and Mac - 1.Nov.2002 6:27:00 PM
|
|
|
Sheila
Posts: 41
Joined: 14.Nov.2001
From: Harrison, OH USA
Status: offline
|
I was! I just changed it and now it's working. Is turning that off a huge security risk? Or, will it in any way allow firewall clients to use protocols that I don't want them to use? Most of my rules are based on users or groups. I only have this one SecureNat client.
|
|
|
|
|
RE: SecureNAT client on PC and Mac - 1.Nov.2002 7:05:00 PM
|
|
|
tshinder
Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline
|
Hi Sheila,
It depends. If you require authentication, then authentication won't be required unless you create a client address set for the single SecureNAT client.
HTH,
Tom
|
|
|
|
 New Messages |
 No New Messages |
 Hot Topic w/ New Messages |
 Hot Topic w/o New Messages |
 Locked w/ New Messages |
 Locked w/o New Messages |
|
 Post New Thread
Reply to Message
Post New Poll
Submit Vote
Delete My Own Post
Delete My Own Thread
Rate Posts |
|
Printable Version
![[Big Grin]](/image/smiles/biggrin.gif)
I tried to make it very clear that SecureNAT clients *cannot* send credentials to the ISA Server, and therefore all of their requests are anonymous from a user/group point of view. However, you can control access for SecureNAT clients by using Client Address Sets.