Welcome to ISAserver.org

config destination sets problem

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2000 General] >> Installation >> config destination sets problem

Page: [1]

Message

<< Older Topic Newer Topic >>

config destination sets problem - 9.Mar.2006 5:59:34 PM

brett100

Posts: 5
Joined: 9.Mar.2006
Status: offline

We have an ISA 2000 server with destination sets, site rules, protocol rules. I also am using the ISA server in a windows 2000 AD environment.
I am taking over support of this program for another tech and I am trying to learn quickly.

The problem seems to be that when I have destination sets and site rules set. The users are not able to read the settings (ie. rules to allow users to not go through proxy and just to go to a website).
We also have a settings in a GPO in our w2k AD enviroment.

My question is: Do I need to have settings in both a GPO and in ISA? Can I just use the GPO to point users to the ISA and make my rules in ISA? Why won't my users pick up the site rules/destination sets is ISA?

Brett

Post #: 1

Featured Links*

RE: config destination sets problem - 12.Mar.2006 10:09:00 AM

AHIT

Posts: 1561
Joined: 22.Jul.2002
From: Sydney, Australia
Status: offline

I fail to understand just what it is your trying do DO at this point.
GPO or ISA? The use of ISA certainyl doesn't NEED a GPO.
If a client machien is set to look to the ISA server then the ISAServer wil use whatever ruleseets its been defined with for the connection/user/etc.
Yes, you can use a Group Policy Object perhaps to help enforce the use of ISA but the 2 things are mutually exclusive.
If you want to allow users to " just to go to a website" then I'd still be sending the request via ISA.. but just having a rule in ISA allowing the access to that site/destination/whatever.

_____________________________

http://www.ahit.com.au/isa
(Previous nick: Tolk)

(in reply to brett100)

Post #: 2

RE: config destination sets problem - 13.Mar.2006 9:14:24 PM

brett100

Posts: 5
Joined: 9.Mar.2006
Status: offline

Thank you for the response.

I would prefer to not go the way of a GPO and to just use ISA.

After reading through the ISA documentation, I am still not clear on why my users are not reading the destination sets when they go through proxy?

The users are reading the proxy info to go through proxy to get to the internet but I am not sure what I am missing.
I have destination sets, protocol rules and sites rules set up for each of the sites that I want the uses to allow the users to go to without being prompted by proxy but they are not applying for some reason?

Any suggestions?

curiosity question - do settings in a GPO override the settings in ISA server?

Thanks again!

(in reply to brett100)

Post #: 3

RE: config destination sets problem - 14.Mar.2006 5:50:51 AM

AHIT

Posts: 1561
Joined: 22.Jul.2002
From: Sydney, Australia
Status: offline

GPO and ISA are 2 different things...
Given Group Policy Objects are applied to the user machine then I guess that GPO could certainly limit how ISA works because the GPO could perhaps define how/where HTTP traffic is sent.

If the traffic is sent via ISA then ISA's rules will do what they're supposed to do...

IF a GPO somehow says traffic to blah should NOT use a web-proxy, then ISA never sees the traffic.

_____________________________

http://www.ahit.com.au/isa
(Previous nick: Tolk)

(in reply to brett100)

Post #: 4