• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

RSA SecurID Setup

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA 2006 Firewall] >> Access Policies >> RSA SecurID Setup Page: [1]
Login
Message << Older Topic   Newer Topic >>
RSA SecurID Setup - 31.Jan.2008 9:13:53 AM   
yatesee

 

Posts: 10
Joined: 25.Apr.2005
Status: offline
Hi,

Setup as follows:

2x ISA2006 EE in an Array. Setting up VPN clients on ISA2 of the array.
Using RSA SecurID Appliance 100.

Im following the Implentation guide for ISA 2006 VPN from RSA.

I have got to the point where i am testing the RSA authentication from the ISA server to the Appliance. It fails everytime to see the RSA box. The rule is set up correctly on the ISA servers (e.g. 5500udp from localhost to internal - as per the implementation guide) and still i get a "Denied Connection" in the live logs from the enterprise default deny all rule.

What am i doing wrong? Why wont it see the RSA box?

The default gateway of the RSA appliance is set to ISA2 of the array (we arnt going to load balance incoming VPN connections). Running an RSA authentication test on the RSA box works fine, so i know the issue doesnt lie there.

Any help would be greatfully received,

Tom
Post #: 1
RE: RSA SecurID Setup - 31.Jan.2008 9:47:36 AM   
yatesee

 

Posts: 10
Joined: 25.Apr.2005
Status: offline
just a quick update...

I've added a rule that says all outbound protocols, from all protected networks to all protected networks, and still i get a "Denied Connection in the logs"

I'm confused. Please help.

(in reply to yatesee)
Post #: 2
RE: RSA SecurID Setup - 31.Jan.2008 10:50:31 AM   
matt.jones

 

Posts: 72
Joined: 16.Aug.2007
From: Poznan, Poland
Status: offline
Have you enabled the RSA SecurID configuration group in the System Policy?

_____________________________

Matthew Jones
MCSA/MCSE:M+S/VCP/CCA/CCNA

(in reply to yatesee)
Post #: 3
RE: RSA SecurID Setup - 31.Jan.2008 11:10:44 AM   
yatesee

 

Posts: 10
Joined: 25.Apr.2005
Status: offline
Yep, thats full enabled for Internal.

(in reply to matt.jones)
Post #: 4

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA 2006 Firewall] >> Access Policies >> RSA SecurID Setup Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts