Welcome to ISAserver.org

firewall clients login directly

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Firewall] >> Firewall Client >> firewall clients login directly

Page: [1]

Message

<< Older Topic Newer Topic >>

firewall clients login directly - 27.Jun.2008 3:18:14 AM

IQ TECHNOLOGY

Posts: 12
Joined: 27.Jun.2008
Status: offline

Hi all ISA genius
Can any one tell me how can control the firewall clients login to the server ??
Because for now any one install the software can login to the network without asking for its user and password in the active directory !!
Please can you give the right procedure to configure the firewall clients with user name and password or any documents for this point ??
Regards

_____________________________

IQ TECHNOLOGY

Post #: 1

Featured Links*

RE: firewall clients login directly - 27.Jun.2008 4:50:09 AM

IanC

Posts: 161
Joined: 11.Jul.2007
From: UK
Status: offline

The firewall client forwards the credentials transparently. Have a look at this...
http://technet.microsoft.com/en-gb/library/bb794762.aspx

Ian

_____________________________

Ian Currie

http://www.curriecomputing.com

(in reply to IQ TECHNOLOGY)

Post #: 2

RE: firewall clients login directly - 27.Jun.2008 5:11:02 AM

IQ TECHNOLOGY

Posts: 12
Joined: 27.Jun.2008
Status: offline

Thanks for your replay
I can understand the login procedure happened in the background
But the problem is even when I remove the user from the AD or disable it , it still can log to the server !!
Its mean there is no login procedure and the firewall client connected directly to the server
I hope some explain

Best Regards

_____________________________

IQ TECHNOLOGY

(in reply to IanC)

Post #: 3

RE: firewall clients login directly - 27.Jun.2008 5:45:08 AM

IanC

Posts: 161
Joined: 11.Jul.2007
From: UK
Status: offline

You will need to specify the users who are permitted to access the remote server in the access rule. By default, this is set to All Users which means no authentication is required.

Ian

_____________________________

Ian Currie

http://www.curriecomputing.com

(in reply to IQ TECHNOLOGY)

Post #: 4

RE: firewall clients login directly - 27.Jun.2008 6:05:59 AM

IQ TECHNOLOGY

Posts: 12
Joined: 27.Jun.2008
Status: offline

and what u will say IanC , if I told you that I remove the term All User and and put instad the Authenticated Clients

Regards

< Message edited by IQ TECHNOLOGY -- 27.Jun.2008 6:08:37 AM >

_____________________________

IQ TECHNOLOGY

(in reply to IanC)

Post #: 5

RE: firewall clients login directly - 27.Jun.2008 7:56:44 AM

IanC

Posts: 161
Joined: 11.Jul.2007
From: UK
Status: offline

That's fine.

Ian

_____________________________

Ian Currie

http://www.curriecomputing.com

(in reply to IQ TECHNOLOGY)

Post #: 6

RE: firewall clients login directly - 28.Jun.2008 3:06:18 AM

IQ TECHNOLOGY

Posts: 12
Joined: 27.Jun.2008
Status: offline

Thanks Ian C

but its not fine !!

i need some one tell me how can solve this problem

Im asking the right way to control the firewall clients login

Im asking for , if I delete a user from the AD , it cannot login even it is a firewall calient

please some body help

Best Regards

_____________________________

IQ TECHNOLOGY

(in reply to IanC)

Post #: 7

RE: firewall clients login directly - 29.Jun.2008 4:54:42 AM

elmajdal

Posts: 4959
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline

quote:

But the problem is even when I remove the user from the AD or disable it , it still can log to the server !!

log to what ?

Internet ? file sharing ?

You disabled or even deleted the user from AD, then how come you are still able to logon to the machine using the deleted/disabled credentials ? cached credentials ok for some time but later on these cached credentials will get expired and you will no longer be able to logon on the machine with the deleted/disabled credentials !!!

I didnt understand what you are discussing here, can you please tell me more details about your issue .

Thanks,
Tarek

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to IQ TECHNOLOGY)

Post #: 8