Welcome to ISAserver.org

We are facing two problems need help badly. I am giving both the problems here.

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Firewall] >> DMZ >> We are facing two problems need help badly. I am giving both the problems here.

Page: [1]

Message

<< Older Topic Newer Topic >>

We are facing two problems need help badly. I am giving... - 26.May2008 12:24:32 AM

ashokgvr

Posts: 3
Joined: 11.Apr.2008
Status: offline

We are facing two problems need help badly. I am giving both the problems here.

ISA Server 2006 at two locations (Location1and location2) as firewall and proxy.
location1 ISA has 2 NICs (Public and Private)
location2 ISA has 3 NICs (DMZ, Private, Public NAT)
Only Nated interface has the gateway configured

Problem 1
�         From DMZ we cannot ping / telnet or send mail to external
�         The same time its allowing both these from internal network
�         From ISA Server we can tracert the external servers but we are not able to telnet to them on port 25
�         If we monitor no denies are coming in the log.

Problem 2
�         Site to Site VPN is not connecting between these two isa servers.
�         We tried both preshared key and certificate options and also tried pptp
�         When we configure preshared key the error is security negotiation timed out after 64 seconds
�         When we configure Certificate its giving error no certificate found. No idea where to configure the certificates. All what we have done is requested and installed an administrator certificate as per the kb article on both the isa servers under trusted certificates
�         Also we have added the root ca under trusted cas

We are getting an error Event id: 20111 from remoteaccess source

Post #: 1

Featured Links*

RE: We are facing two problems need help badly. I am gi... - 1.Jul.2008 8:10:20 AM

tshinder

Posts: 47010
Joined: 10.Jan.2001
From: Texas
Status: offline

Do you have the required Network Rules in place?

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to ashokgvr)

Post #: 2

RE: We are facing two problems need help badly. I am gi... - 2.Jul.2008 2:06:56 AM

ashokgvr

Posts: 3
Joined: 11.Apr.2008
Status: offline

Hi Tom

The issue is already solved thanks for your response.

The issue was realted to Network rules We created the appropriate rules for that now it is working fine.

Thanks.

Ashok Vikram

(in reply to tshinder)

Post #: 3

RE: We are facing two problems need help badly. I am gi... - 2.Jul.2008 9:58:23 AM

tshinder

Posts: 47010
Joined: 10.Jan.2001
From: Texas
Status: offline

Very good!

Good to hear you got it working and thanks for the follow up!

Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to ashokgvr)

Post #: 4