Welcome to ISAserver.org

Static NAT in ISA 2000 or ISA 2004

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 General ] >> Server Publishing >> Static NAT in ISA 2000 or ISA 2004

Page: [1]

Message

<< Older Topic Newer Topic >>

Static NAT in ISA 2000 or ISA 2004 - 24.Mar.2005 6:17:00 AM

gshiva

Posts: 2
Joined: 2.Oct.2004
From: Chennai
Status: offline

Hi
Can we do Static NAT with ISA 2000 or ISA 2004. I have tried with ISA 2000/ISA 2004 standard/enterprise.

Please share your knowledge if anyone has successfully configured static NAT with ISA Server?

Post #: 1

Featured Links*

RE: Static NAT in ISA 2000 or ISA 2004 - 24.Mar.2005 1:44:00 PM

tshinder

Posts: 47659
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi S,

What is it that you actually want to accomplish? The goal isn't static NAT, its provided access to some content.

Thanks!
Tom

(in reply to gshiva)

Post #: 2

RE: Static NAT in ISA 2000 or ISA 2004 - 19.Apr.2005 10:42:00 PM

robkleinpeter

Posts: 3
Joined: 27.Sep.2002
From: Baton Rouge, Louisiana
Status: offline

hello....I am not sure if this was his question but I have one that is close. I am pretty sure the answer is no but can you create a In_IP to Out_IP mapping in ISA 2K4? I am trying to get multiple Internal server to use specific External IP's much like the PIX "static map".

Thanka in advance.

(in reply to gshiva)

Post #: 3

RE: Static NAT in ISA 2000 or ISA 2004 - 21.Apr.2005 5:22:00 PM

erickmiller

Posts: 37
Joined: 2.Mar.2002
From: Lake Zurich, IL
Status: offline

Hi Rob,

Unfortunately, ISA Server 2004 can't do static NAT like you are talking about. I've tried to create 2 rules in the past that were assigned ports 1 through 65,535, one for inbound and one for outbound, and ISA will accept it and finally process it correctly, but it takes an eternity to apply the policy, which makes it almost useless.

ISA 2004 will, however, "route" traffic from one interface to another and allow you to specify "all outbound traffic" in an "Access Rule". You can create 2 access rules, one for each direction. This, however, does NOT do NAT. Just thought I'd point it out in case it helped.

I'm not sure if "all outbound traffic" means "all outbound traffic defined by the protocols list" like Check Point's "Any" name. This means that if there is a port that isn't defined in your Protocols list, it probably won't pass... so this method most likely does not just pass truly "any" traffic from one Network to another.

Eric

(in reply to gshiva)

Post #: 4