The first problem is I get the following even message on the ISA server

The <I>IntraArrayAddress</I> defined on this server is not in the Local Address Table (LAT). For more information about this event, see ISA Server Help.

Cannot find anything it help that would indicate where I should look. I did verify that my internal network addresses are in the LAT table, along with the standard ones that are generatred by the installation. Any help on this issue would be appreciated.

Second issue, with ISA installed as a firewall onlly, can I mix the accesses methods. Have a couple of situations that I would like to use securnat for the users and some that will need to use the firewall client. When I go to configure the clients, all I see are webbrowser and firewall. Unless I am missing a very basic item in the documentation which is always possible.

Anyway, thanks in advance for the assist on these two issues

Steve Berra

Check in the "computers" node in the left pane and see what address has been assigned for the intraarray address. It needs to be set to the address used on the internal interface.

Just for fun, remove all addresses and network IDs from the LAT which are *not* part of your internal network. Only include addresses and address ranges that are acutally part of your internal network. The best way to do this is to create a proper routing table on your ISA Server, and then allow ISA Server to build a LAT based on the routing table entries on your internal interface.

With the Firewall Only configuration, you do not have access to the Web Proxy service, so you will not be able to configure the browsers to be web proxy clients. You can configure the clients to be Firewall and SecureNAT clients, however.

The only configuration change you need to make in order to create a SecureNAT client is to configure the client to use a default gateway that routes to the internal interface of the ISA Server computer.

HTH,

Tom

------------------
Tom Shinder
http://www.isaserver.org/shinder/

Server Name, Version, Product ID, Created date, Load factor and installation directory.

It does not show the anything about the ip addresses.

Also, not sure if this matters, but it is the standard version of ISA, not the enterprise.

Also thanks for letting me know about the SecurNat configuration

Steve

Aha! The reason why you don't get the entry for the internal address to be used for intra-array communications is becuase you have to have an array configured in order for that to show up. Since you're using the standard edition, you cannot create an Enterprise Array.

This still doesn't answer the question regarding the error message. It still sounds like a LAT problem. Are you using a public address on the external interface? What addresses are configured in the LAT? Do they match up with the network IDs you have internally?

re: client types. You can run both the SecureNAT and the Firewall Client in Firewall only mode. However, in this mode, there will be *no* web proxy service, so these clients cannot take advantage of the Web Cache or any other feature of the Web Proxy Service.

HTH,
Tom

------------------
Tom Shinder
http://www.isaserver.org/shinder/

10.0.0.0 - 10.255.255.255
169.254.0.0 - 169.254.255.255
172.16.0.0 - 172.31.255.255
192.168.0.0 - 192.168.255.255
192.168.10.1 - 192.168.10.255

The top 4 entries where placed by the install of ISA, the last one I entered into it. The last one is the IP addresses used in our shop at the moment, although we will be converting to a 10. network soon

Thanks

Also, what services are you running on your computer? Someone commented that if you run IIS WWW service on port 80 on the machine, that you would get a similar error. Try changing the port number on the WWW or removing IIS from the computer.

Tom

------------------
Tom Shinder
http://www.isaserver.org/shinder/