• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Site Access

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2004 General ] >> General >> Site Access Page: [1]
Login
Message << Older Topic   Newer Topic >>
Site Access - 6.Jun.2007 9:35:52 AM   
JohnH

 

Posts: 2
Joined: 6.Jun.2007
Status: offline
We are running ISA 2004 Standard on 2003 standard and the workstations are XP SP2.

I have a rule that denies internet access to a user group with the exception of: http://www.stapleslink.com
https://www.stapleslink.com
https://170.37.20.100

After that rule there is an allow anything, anyone, anywhere, anytime rule.
Then the last Default rule which is a deny everything.

I have a shortcut placed on the users desktop to http://www.stapleslink.com.

The users receive the ISA deny page. The real time monitor shows thier traffic as being blocked by the last default rule.

If I try to use either of the other 2 exception sites, we receive the following:

Network Access Message: The page cannot be displayed
<TR  (including the <TR)

Any and all help is appreciated as I am out of ideas.
Post #: 1
RE: Site Access - 6.Jun.2007 11:01:04 PM   
Rotorblade

 

Posts: 1348
Joined: 27.Feb.2007
Status: offline
Hi JohnH,

ISA Client access, how are the XP WS configured?

First rule: Create new rule based on a URL and or Domain set. (containing the exception web sites) Apply the rule to allow anyone and base the TO (destination) in the rule to the  URL or Domain set.

Second rule: Deny access rule for the specific user group. Note: If you are using SecureNAT client, this won’t work!

Third rule: allow all access rule

Last: default last rule.

HTH
RB

(in reply to JohnH)
Post #: 2
RE: Site Access - 8.Jun.2007 10:21:02 AM   
JohnH

 

Posts: 2
Joined: 6.Jun.2007
Status: offline
Perfect, that was a great suggestion.

1st - I placed a rule allowing everyone from anywhere access to Staples (urlset).

2nd - Denied Internet access to group "No Internet".

3rd - Allow everything.

Thanks for the resolution!

(in reply to Rotorblade)
Post #: 3

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2004 General ] >> General >> Site Access Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts