Welcome to ISAserver.org

The Page Cannot Be Displayed

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2000 General] >> General >> The Page Cannot Be Displayed

Page: [1]

Message

<< Older Topic Newer Topic >>

The Page Cannot Be Displayed - 24.Sep.2004 6:03:00 AM

ZFetsh

Posts: 6
Joined: 25.Mar.2004
Status: offline

This morning, we found that the setup of our rules allowed restricted users to bypass a login prompt and access any page they liked.

Rule #1 was
Deny: Domain users
Except: Internet user group

Rule #2 was
Allow: All users

This worked great, because the domain users had to go through rule #1, where as anonymous accounts and systems that did not have proxy authentication could still run with rule #2 (antiviruse, etc)

Initial problem: With the user just pressing esc at the login window, the user seemed to be able to access the site anyway, albeit with the left finger hovering over the esc key all the time

Fix: I changed the rules to allow the following

Deleted rule #1 and rule #2

Rule #3
Allow: Internet user group

Rule #4
Allow: Server ip address list (server 1 IP, server 2 IP, server 3 IP)

This works perfect, or so it seemed, as only the permitted users can access the internet (cannot bypass anymore, as theres no allow rule that they can use), and the servers have unrestricted blanket access to the internet.

--- Problem I need help with ---

Site: www.firstcitygroup.co.nz

If accessing this one site from one of the specified servers, I have full access to the site. If I try the site from another computer, even logged on with administrator rights and administrator is a member of the internet user group, I cannot access the site.

Any ideas?

If I enable all requests access to the internet, and try from the same computer that I know has the problem, it will work. So far, I think I have ruled out PC setup and DNS problems

[ September 24, 2004, 06:05 AM: Message edited by: ZFetsh ]