Welcome to ISAserver.org

Setting up a permiter network access

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> Network Infrastructure >> Setting up a permiter network access

Page: [1]

Message

<< Older Topic Newer Topic >>

Setting up a permiter network access - 5.Sep.2005 10:13:00 AM

hillda01

Posts: 4
Joined: 5.Sep.2005
From: UK
Status: offline

My problem is that I am unable to connect to the ISA server (localhost) from a perimeter network I set up.

My internal adapter address range is 129.111.6.0 to 129.111.7.255

My perimeter network address range is 129.111.3.20 to 129.111.3.25

I have set up a network rule to allow all outbound traffic on all protocols coming from the perimeter network to the localhost.

I think what I have done is correct.

I wonder if you could point me in the right direction.

Regards

David

Post #: 1

Featured Links*

RE: Setting up a permiter network access - 7.Sep.2005 1:12:00 PM

tshinder

Posts: 47659
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi David,

What is the purpose of such a rule? Are you pentesting and showing how to easily subvert ISA firewall security?

Thanks!
Tom

(in reply to hillda01)

Post #: 2

RE: Setting up a permiter network access - 8.Sep.2005 9:34:00 AM

hillda01

Posts: 4
Joined: 5.Sep.2005
From: UK
Status: offline

Hi Tom,

Thanks for the reply.

My situation is this.

I have installed ISA 2004 with two NICS installed, one with the ip 192.168.1.3, subnet 255.255.255.224 and default gateway of 192.168.1.1

The other NIC is 129.111.7.77, subnet 255.255.254.0 with no default gateway.

We have another site close by connected by two routers, the ip range is 129.111.0.0 to 129.111.3.255 with a subnet of 255.255.252.0

What I want to do is be able to remotely manage and store some files on the ISA server that the perimiter network (129.111.0.0 - 129.111.3.255)

I have created a perimeter network as shown above and created a routed network rule from 129.111.0.0 to remote management computers which has 129.111.7.77 in it. I tried adding localhost but it says that cant be added.

I then created an allow all protocol policy from the perimeter network to the remote management computers. Unfortunately this still doesnt work.

Do I need to specify a default gateway for the second NIC or do I need a third NIC with an ip address which is in the 129.111.0.0 - 129.111.3.255 range??

This is really puzzling me....

Regards

David

(in reply to hillda01)

Post #: 3