Welcome to ISAserver.org

authentication

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> SecureNAT Client >> authentication

Page: [1]

Message

<< Older Topic Newer Topic >>

authentication - 28.Feb.2007 2:25:50 AM

create_share

Posts: 258
Joined: 4.May2005
Status: offline

I have DHCP users which are not using webproxy or firewall clients. Is it possible to enable authentication for them?

Thanks!

Post #: 1

Featured Links*

RE: authentication - 4.Mar.2007 6:45:27 PM

royh

Posts: 284
Joined: 23.Feb.2007
From: Lebanon
Status: offline

Basically yes, it is possible to authenticate them....

_____________________________

Roy Haddad,M.Sc
CCNA, MCSE 2003 Messaging & Security,C|EH

(in reply to create_share)

Post #: 2

RE: authentication - 5.Mar.2007 8:46:10 AM

create_share

Posts: 258
Joined: 4.May2005
Status: offline

is it possible for you to tell me how can i do this?

Thankx!

(in reply to royh)

Post #: 3

RE: authentication - 6.Mar.2007 8:56:06 AM

royh

Posts: 284
Joined: 23.Feb.2007
From: Lebanon
Status: offline

To restrict access for your secureNAT clients, you can set up a deny rule that applies to all, and then create an allow rule as an exception to that deny rule that apply to authenticated users...

HTH
Roy.

_____________________________

Roy Haddad,M.Sc
CCNA, MCSE 2003 Messaging & Security,C|EH

(in reply to create_share)

Post #: 4

RE: authentication - 28.Apr.2007 6:17:15 AM

bakhshi

Posts: 23
Joined: 17.Jun.2006
Status: offline

SecureNAT clients can not be authenticated, while webproxies can.
If you just wanna disable securenat clients to access internet and make them set proxy on their browsers, then:
In application filter, go to "HTTP Redirector Filter " properties and select "Reject HTTP requests from Firewall and SecureNAT clients "

For more info read this article by Tom Shinder: http://www.isaserver.org/tutorials/Preventing_SecureNAT_and_Firewall_Clients_from_Bypassing_the_Web_Proxy_Service_andHow_to_Give_Yourself_a_Headache_with_the_HT.html

(in reply to create_share)

Post #: 5