Web Clients unable to access internet (Full Version)

All Forums >> [ISA 2006 Web Proxy] >> General



Message

gregvinton -> Web Clients unable to access internet (1.Jul.2008 11:13:12 PM)

Hi everyone, this is my first post here, and I have been looking through the previous posts and I can't find an answer.  I will just run you through my setup and hopefully someone can call me stupid and point out the problem straight away.

We are using ISA 2006 as a web caching proxy, and it works fine.  Now we want to start to use the isa box as a firewall. So i have been doing some testing, and been having a few issues.  I have changed the settings to a back firewall, as we have a ISP managed Firewall beyond the ISP managed router. So i have setup the internal nic with the ip 10.1.166.1 on 255.255.255.0 subnet our internal network is 10.1.166.0/24  I have also put our dns servers on the internal nic.  on the external nic I have put the ip 172.1.166.2 on the subnet 255.255.255.252 the routers ip is 172.1.166.1 and that is the default gateway for the external NIC.

OK.. so the problem I am having is that I can get all traffic to flow through the isa box fine, when it comes to people using their web broswer (i.e 7) it just comes up with the error that the website did not respond in time, this error is on returned from the proxy.  When i look in the logs on the proxy I can see the clients HTTP request it shows that the request is going from Internal to Local host. Because I couldn't get it working I changed it back to a web caching prxy and to a single NIC.. I can see that the HTTP requests are going fromt he client internal IP to the external. 

Just not to sure what more I can try.. in the firewall policy just a base I have set allow all traffic from all networks sets TO all networks sets.  I am able to ping www.google.com from cmd not problems, just can't browse to it.  From another network on the WAN i can ping to my ISA box, external and internal nic, as well as to the internal network.  So the only traffic that can't go through is the traffic coming from Internet explorer. I have also set the proxy settings to 8080

Is there anything I am missing?

thanks again for your help...

ta



pwindell -> RE: Web Clients unable to access internet (2.Jul.2008 11:33:23 AM)

Uninstall ISA
Verify the physical machines nics are properly configured the way ISA expects them to be
Re-install ISA with the Edge Firewall Temple.
Re-apply and ISA Patches or SPs.
Reconfigure from scratch.

It is actually faster to do that in my opinion than it is to sort out the mess.



gregvinton -> RE: Web Clients unable to access internet (2.Jul.2008 6:40:25 PM)

Hi there thanks for the reply, the only problem is that this is a surf control appliance box. so i am a lil worried that removing and reinstalling isa will cause problems with the surf control part of the box.



pwindell -> RE: Web Clients unable to access internet (3.Jul.2008 11:44:47 AM)

You're right don't touch it.

If this is an Appliance from SurfControl, then maybe you should call their support.



usmcdjb -> RE: Web Clients unable to access internet (29.Jul.2008 1:48:47 PM)

When in proxy mode, what IPs are you using?  Just a single NIC?  Is your internal network just the single 10.1.166.0/24 subnet?



Page: [1]