Welcome to ISAserver.org

SecureNAT clients can aceess internet without permission.

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2000 Firewall] >> SecureNAT Client >> SecureNAT clients can aceess internet without permission.

Page: [1]

Message

<< Older Topic Newer Topic >>

SecureNAT clients can aceess internet without permission. - 10.Oct.2005 9:35:00 AM

tolgaygul

Posts: 7
Joined: 4.Apr.2002
Status: offline

Hi,

Yesterday I realised SecureNAT clients can aceess internet without permission.

Win200 SP4
ISA SP2
Integrated mode

(For outgoing web request "ask unauthenticated user for idendification" is checked )

When Automatically detect setting is sellected and proxy setting is not selected in internet connection settings o IE all the users can access internet without permission. When I unselect the Ip routing then they cant access but I have to use IP routing. Would you say what is wrong and how can I fix it. Thanks.

[ October 10, 2005, 09:46 AM: Message edited by: tolgaygul ]

Post #: 1

Featured Links*

RE: SecureNAT clients can aceess internet without permi... - 25.Apr.2007 2:28:32 AM

bakhshi

Posts: 23
Joined: 17.Jun.2006
Status: offline

quote:

ORIGINAL: tolgaygul

Hi,

Yesterday I realised SecureNAT clients can aceess internet without permission.

Win200 SP4
ISA SP2
Integrated mode

(For outgoing web request "ask unauthenticated user for idendification" is checked )

When Automatically detect setting is sellected and proxy setting is not selected in internet connection settings o IE all the users can access internet without permission. When I unselect the Ip routing then they cant access but I have to use IP routing. Would you say what is wrong and how can I fix it. Thanks.

[ October 10, 2005, 09:46 AM: Message edited by: tolgaygul ]

I've the same problem, I mean users can access the internet without setting proxy in their browsers, but I've not enabled IP routing!! really wanna know why and how?

(in reply to tolgaygul)

Post #: 2

RE: SecureNAT clients can aceess internet without permi... - 28.Apr.2007 6:13:05 AM

bakhshi

Posts: 23
Joined: 17.Jun.2006
Status: offline

You know, SecureNAT clients can no be authenticated, but Web proxies can.
If you just wanna disable securenat clients to access internet and make them set proxy on their browsers, then:
In application filter, go to "HTTP Redirector Filter " properties and select "Reject HTTP requests from Firewall and SecureNAT clients "

For more info read this article by Tom Shinder: http://www.isaserver.org/tutorials/Preventing_SecureNAT_and_Firewall_Clients_from_Bypassing_the_Web_Proxy_Service_andHow_to_Give_Yourself_a_Headache_with_the_HT.html

(in reply to bakhshi)

Post #: 3