Welcome to ISAserver.org

Users bypassing Proxy?

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2000 General] >> General >> Users bypassing Proxy?

Page: [1]

Message

<< Older Topic Newer Topic >>

Users bypassing Proxy? - 29.Aug.2007 1:32:52 PM

manning

Posts: 96
Joined: 9.Oct.2006
Status: offline

Maybe this is by design, or maybe I have missed something. I have done a few searches and I just can't seem to nail this down. Basically some of my users are unchecking 'Use a proxy server for your LAN..." in IE and are thereby getting to sites that are supposed to be blocked. I know I can prevent these users from being able to modify the IE settings via Group Policies. The problem is that I have to allow these folks to be able to turn off the use of our proxy while they are away from the office with their notebooks so they can access the web from hotels or customer sites.

As is, if IE is set to use our proxy, then banned sites are blocked. It doesn't matter whether the firewall client is installed or not.

IE 6 or IE 7 on XP Pro through ISA 2004 on Server 2003

This was also an issue with ISA 2000 on Server 2000 or 2003, I just didn't ever get around to sorting it out back then.

Why did this get moved to the ISA 2000 General forum?

EDIT Seriously nobody has any comments about this?

EDIT #2 OK, I think I figured it out. Actually I switched back to our old ISA 2000 box to see if the same problem existed as I remembered and indeed it does, and because I am more familiar and comfortable with 2000. On that box I switched the 'allow all' rule to only allow a specific user group which seemed to address the issue, but then I noticed e-mail wasn't going out. So I thought maybe I needed to leave the 'allow all' rule alone (allow any connection) and look at the protocol elements. I changed my HTTP protocol rule to only allow access by the specific user group and now mail goes in and out and you have to use the correct address in the IE proxy config. That in turn has lead me to a solution, I think, for 2004 though I am still running into a hiccup with the secure connection to our payroll company.

< Message edited by manning -- 1.Oct.2007 1:36:04 PM >

_____________________________

Manning

Please bear with me, I am incredibly distracted by a dozen other thing.

ISA 2006 standard on Server 2k3 R2