Welcome to ISAserver.org

Some Web proxy clients cannot access Internet

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Cache] >> Web Proxy client >> Some Web proxy clients cannot access Internet

Page: [1]

Message

<< Older Topic Newer Topic >>

Some Web proxy clients cannot access Internet - 17.Feb.2008 12:05:35 AM

ashabc

Posts: 4
Joined: 16.Feb.2008
Status: offline

I am new and not sure if this is thr right forum for this.

I have just installed ISA 2006 with all upto date patches on Windows 2003 sp1.

In my internal network there are three subnets. I have included only one subnet (net1) into internal network. For other subnets I have created 2 (net2 and net3) more networks in ISA and establised netowrok rules between net2, net3 and the external network as NAT

The routing table in ISA insludes path for all 3 internal network.

I have created 2 access rule

1. From Internal (net1) network to external network - this is working fine.
2. From net2 and net3 to external network. Clients from net2 and net3 cannot access Internet. I have even changed the rule to allow all outgoing protocol, still it does not work.

When I enable logging in ISA, I can see that "http proxy" "denied connection" from the clients in net2 and net3. I am sure I am missing something here.

Any help will be appreciated.

Ash

Post #: 1

Featured Links*

RE: Some Web proxy clients cannot access Internet - 17.Feb.2008 6:23:52 AM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi Ash,

the proper way to configure a network within a network scenario is explained in:
- http://isaserver.org/articles/2004netinnet.html.
- http://isaserver.org/articles/2004isafirewallnetworks.html.

My favorite design is shown my article How to Implement VPN Off-Subnet IP Addresses, section '2. Network Design'.

HTH,
Stefaan

(in reply to ashabc)

Post #: 2

RE: Some Web proxy clients cannot access Internet - 18.Feb.2008 5:52:51 AM

ashabc

Posts: 4
Joined: 16.Feb.2008
Status: offline

Hi Stefaan,

Thanks for the quick reply.

Yes, the URL specified was the answer for me.
http://isaserver.org/articles/2004netinnet.html

Appreciate your help.
Ash

(in reply to spouseele)

Post #: 3