Welcome to ISAserver.org

VERY Weird Behavior from ISA with SecureNAT

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2000 Firewall] >> SecureNAT Client >> VERY Weird Behavior from ISA with SecureNAT

Page: [1]

Message

<< Older Topic Newer Topic >>

VERY Weird Behavior from ISA with SecureNAT - 11.Sep.2003 1:48:00 PM

Fett

Posts: 18
Joined: 19.Jul.2003
From: UK
Status: offline

Hi all,

I've been running ISA Server for about 5 weeks now with all of my clients set up as SecureNAT clients. It has been BRILLIANT with everyone happy, the sun shining and free gold for everyone...

Until today.

Today, four out of 22 clients have stopped having any kind of internet access. We've tried:
Client reboots
Server Reboots
Confirmed NIC settings are identical on clients
Confirmed same windows updates applied on clients
Confirmed Same Version of Windows (XP)
Trying to get to same websites.
Confirmed same Internet Explorer Settings

I cannot find any kind of pattern but what set of clients can get to the net and a few cannot. In some cases they are sat next to each other plugged in to the same switch!

ALL CLIENT can access the INTRANET however, so it is not a browser problem.

Post #: 1

Featured Links*

RE: VERY Weird Behavior from ISA with SecureNAT - 12.Sep.2003 3:09:00 AM

sniper

Posts: 687
Joined: 9.Aug.2001
From: OK, USA
Status: offline

Fett,

Check the HTTP redirector and make sure its set to forward requests to the Web proxy service. Also look to see if the Logs show the traffic being denied. I had a similar issue at a clients and for some reason we rebuilt that LAT and then it all worked.

The protocol rule might be flaking out sometimes they take walks and just need to be rebuilt.

(in reply to Fett)

Post #: 2

RE: VERY Weird Behavior from ISA with SecureNAT - 26.Sep.2003 9:04:00 AM

cko

Posts: 52
Joined: 4.Aug.2003
Status: offline

i had similar problems with my isa server. it did block udp packets or the firewall service somehow did not release its sessions from the securenat clients. so if about 10 users were on it, it just did not work for other ones.
i found 2 articles on MS KB about this, but stating these bugs are fixed in sp1. i did have sp1 installed and i even tried to apply sp1 again, more than once. no luck...
after all i did deinstall isaserver and did a full new installation and configuration. this error is gone for now - it seems.

(in reply to Fett)