We have two separate sites, one protected by ISA 2004 SP3 on Windows Server 2003 SP2, the other protected by ISA 2006.
All of the clients are using Windows Server 2003 (Developers) or Windows XP Pro on the network behind the ISA 2006 server.
I have created an IPSEC Site to Site VPN between the sites, and all works fine. Apart from one or two users who, for some reason, are able to access resources on the other network, and then for no apparent reason, they are not. Complete cut-off. It appears to be synchronous as well, when one user is down, the others are as well.
There are not a large number of users in question, two or three out of 25. But this issue has been plaguing me for a couple of months now, and I cna't find anything to resolve it!!
In Session monitoring on ISA 2006 I can see SecureNAT sessions from the client IP address, as well as Web Proxy sessions. If I try and disconnect these and get the user to connect, nothing changes. Session monitoring on ISA 2004 only shows a handful of SecureNAT sessions, the troubled clients are not included in this list.
Any suggestions would be gratefully received!! Thanks Vance