Welcome to ISAserver.org

When does SecureNAT not work?

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2000 Firewall] >> SecureNAT Client >> When does SecureNAT not work?

Page: [1]

Message

<< Older Topic Newer Topic >>

When does SecureNAT not work? - 23.Oct.2002 4:53:00 PM

PeckBob

Posts: 15
Joined: 9.Oct.2002
From: Cleveland, OH
Status: offline

Got a weird one, an instance where (it seems) SecureNAT
did not work, and I NEEDED the Firewall Client.

I have the normal Rules setup by the ICW, so I've got the
Firewall Client installed on all machines.

One (new) laptop, did not have the FW client yet installed
and could not get a web site with streaming video to work.

Pulling out my hair on other problems, I thought I'd give
up and just SecureNAT everyone. That is: I Created an
All/All/Everyone Site & Content Rule, and a
All/All/Everyone Protocol Rule. So, I did that.

Still didn't work. Everything else did (SMTP, POP3,
Telnet, etc.)

When I installed the FW client, the streaming video
worked.

What is going on here? Why does it actually need the FW
client, and SecureNAT not work?

Post #: 1

Featured Links*

RE: When does SecureNAT not work? - 23.Oct.2002 8:53:00 PM

PeckBob

Posts: 15
Joined: 9.Oct.2002
From: Cleveland, OH
Status: offline

I think I got an answer from someone.

It's quite possible that this web application is attempting to access my IP address, which SNAT cannot do. Is this plausible?

(in reply to PeckBob)

Post #: 2

RE: When does SecureNAT not work? - 24.Oct.2002 5:22:00 PM

tshinder

Posts: 47669
Joined: 10.Jan.2001
From: Texas
Status: online

Hi Bob,

You need the Firewall client whenever you need access to "complex" protocols that require secondary connections.

HTH,
Tom

(in reply to PeckBob)

Post #: 3

RE: When does SecureNAT not work? - 22.Nov.2002 7:27:00 AM

prasanthn

Posts: 2
Joined: 22.Nov.2002
From: Hyderabad
Status: offline

hi bob

Make sure that you have unchecked the "Ask unauthenticated users for Identification" option. For Secure NAT you should disable above said option. One more thing It is always better to use client address sets while creating access policies. You can find this option in Server properties.

thanks
prasanth

(in reply to PeckBob)

Post #: 4