Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

RE: denied acces to some websites

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2004 General ] >> General >> RE: denied acces to some websites Page: <<   < prev  1 [2]
Login
Message << Older Topic   Newer Topic >>
RE: denied acces to some websites - 1.Apr.2006 8:30:06 PM   
tshinder

 

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline 		Try configuring the clients as Web proxy and Firewall clients.

Make sure that you don't put anonymous access rules under authenticated access rules.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to LLigetfa)
Post #: 21
RE: denied acces to some websites - 1.Apr.2006 8:47:04 PM   
elmajdal

 

Posts: 5074
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline
quote:


Make sure that you don't put anonymous access rules under authenticated access rules.


more on this can be found here :

Understanding the ISA 2004 Access Rule Processing

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to tshinder)
Post #: 22
RE: denied acces to some websites - 2.Apr.2006 9:03:48 PM   
jorisw86

 

Posts: 40
Joined: 26.May2005
Status: offline 		the server where we installed isa on whas already in the domain does that matters?


(in reply to LLigetfa)
Post #: 23
RE: denied acces to some websites - 2.Apr.2006 9:45:04 PM   
LLigetfa

 

Posts: 2184
Joined: 10.Aug.2004
From: fort frances.on.ca
Status: offline 		It's OK to install ISA on a server that is already joined to the domain.

_____________________________

The School of Hard Knocks is a mean teacher. She gives the exam before the lesson.

(in reply to jorisw86)
Post #: 24
RE: denied acces to some websites - 3.Apr.2006 9:18:25 AM   
jorisw86

 

Posts: 40
Joined: 26.May2005
Status: offline 		will it help to remove the isa server from the domain and readd it to the domain??

casue isa aint wokring when i add a certain group it only listence to all users:S

< Message edited by jorisw86 -- 3.Apr.2006 9:19:27 AM >

(in reply to LLigetfa)
Post #: 25
RE: denied acces to some websites - 5.Apr.2006 4:58:27 PM   
tshinder

 

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline 		Hi Joris,

Make sure you configure the clients as Web proxy and firewall clients.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to jorisw86)
Post #: 26
RE: denied acces to some websites - 6.Apr.2006 9:24:34 AM   
jorisw86

 

Posts: 40
Joined: 26.May2005
Status: offline 		i did i have set them in the group policy there internet settings see this screen.
http://home.wanadoo.nl/n.werensteijn/web%20proxy.JPG

i also tried it with the firewall client and added the rule forcecridentials to 1 so it's enabled but it all doesn't work.

when i go to monitoring or logging i only see anonymus

pls help

i also found this in an article:
The authentication methods allowed for the Web Proxy clients are a property of the Networks (Web Proxy tab). Therefore, that property is bound to an interface adapter and the allowed authentication method applies to all subnets reachable through that interface

but i can't vind this option

< Message edited by jorisw86 -- 6.Apr.2006 9:25:54 AM >

(in reply to tshinder)
Post #: 27
RE: denied acces to some websites - 6.Apr.2006 3:09:22 PM   
LLigetfa

 

Posts: 2184
Joined: 10.Aug.2004
From: fort frances.on.ca
Status: offline
quote:

when i go to monitoring or logging i only see anonymus

Then it means you have "All Users" in your rule.  You have to remove "All Users" and apply the rule to specific groups instead.

_____________________________

The School of Hard Knocks is a mean teacher. She gives the exam before the lesson.

(in reply to jorisw86)
Post #: 28
RE: denied acces to some websites - 6.Apr.2006 3:47:22 PM   
jorisw86

 

Posts: 40
Joined: 26.May2005
Status: offline 		yes that is correct.

but when i remove all users from that tab we alle get an auth box when we open an internet site and the groups are added.

i also trew away all users and added auth users doesn't matters it keep on popping up with the auth box.

i am able to see the users on connectivity now delta/joris delta/mmohad now.
after reinstalling the firewall client it worked.

but still on logging i get anonymus

(in reply to LLigetfa)
Post #: 29
RE: denied acces to some websites - 6.Apr.2006 3:56:56 PM   
LLigetfa

 

Posts: 2184
Joined: 10.Aug.2004
From: fort frances.on.ca
Status: offline 		Change your authentication from *basic* to *integrated* to get rid of the logon dialogs.

_____________________________

The School of Hard Knocks is a mean teacher. She gives the exam before the lesson.

(in reply to jorisw86)
Post #: 30

Page:   <<   < prev  1 [2] << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2004 General ] >> General >> RE: denied acces to some websites Page: <<   < prev  1 [2]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts