Welcome to ISAserver.org

SecureNAT direct pass through without the NAT?

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> SecureNAT Client >> SecureNAT direct pass through without the NAT?

Page: [1]

Message

<< Older Topic Newer Topic >>

SecureNAT direct pass through without the NAT? - 26.Jun.2006 11:35:43 PM

Difranco

Posts: 15
Joined: 26.Jun.2006
Status: offline

Hello,

I am in the process of evaluating ISA2006 and I will be replacing 2 ISA 2000 servers. In the current configuration (ISA 2000) there is a network bypass around the ISA servers for some web applications that did not function properly with NAT.

The design is like this

internal network -->ISA2000 --> DMZ --> CISCO PIX

however there is a bypass for certain traffic to go straight from the internal network to the dmz without ever being seen by ISA 2000.

I'd sure like to get rid of this network bypass but in enable this web application to function properly through ISA. Is there away to allow certain traffic to certain domains/websites to pass through ISA 2006 without NAT?

< Message edited by Difranco -- 26.Jun.2006 11:39:11 PM >

Post #: 1

Featured Links*

RE: SecureNAT direct pass through without the NAT? - 27.Jun.2006 4:06:09 PM

Difranco

Posts: 15
Joined: 26.Jun.2006
Status: offline

Lots of views, but nobody knows? As you can tell I am a newbie as this was dumped in my lap. The original setup was installed by a another server admin (4 people ago) and there isn't much documentation. Any help would be appreciated.

(in reply to Difranco)

Post #: 2

RE: SecureNAT direct pass through without the NAT? - 27.Jun.2006 8:53:33 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi Difranco,

are you assuming that those web applications aren't NAT compatible because they told you that, or do you have hard evidence such as netmon traces to prove that statement? Also, is the Cisco PIX also doing NAT?

HTH,
Stefaan

(in reply to Difranco)

Post #: 3