Welcome to ISAserver.org

Problem when allowing specific users to access internet

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Firewall] >> Access Policies >> Problem when allowing specific users to access internet

Page: [1]

Message

<< Older Topic Newer Topic >>

Problem when allowing specific users to access internet - 15.Dec.2010 2:45:54 AM

meniem

Posts: 6
Joined: 23.Sep.2010
Status: offline

Hi Guys,

I need to create an access rule to allow specific users from accessing the internet,

I've already created one as follows:

But the problem appears when i replace "all users" with a "custom users set" or add an exception.

The problem happens in outlook. It stop send/receive:

So i need to know what is wrong in assigning a "specific users set" to access internet.

Post #: 1

Featured Links*

RE: Problem when allowing specific users to access inte... - 15.Dec.2010 8:06:49 AM

paulo.oliveira

Posts: 3470
Joined: 3.Jan.2008
From: Amazon, Brazil
Status: offline

Hi,

do you have FWC installed on these machines?

Why "All Outbound Traffic"? Why not only HTTP/HTTPs?

Regards,
Paulo Oliveira.

_____________________________

Microsoft MVP - Forefront
MCP - ISA Firewall 2004
Blog: http://poliveirasilva.wordpress.com/
Twitter: https://twitter.com/poliveirasilva

(in reply to meniem)

Post #: 2

RE: Problem when allowing specific users to access inte... - 16.Dec.2010 8:57:39 AM

meniem

Posts: 6
Joined: 23.Sep.2010
Status: offline

Dear Paulo Oliveira,

Thanks a lot for your reply.

Really i don't have FWC installed on these machines, i use Web Proxy client.

I use "All Outbound Traffic" not only HTTP/HTTPs ; Because i use a lot of protocols like: HTTP, FTP, POP3, SMTP, media stream protocols .....

What do you recommend for me to do to resolve this issue?

Best Regards

(in reply to paulo.oliveira)

Post #: 3

RE: Problem when allowing specific users to access inte... - 16.Dec.2010 7:00:43 PM

paulo.oliveira

Posts: 3470
Joined: 3.Jan.2008
From: Amazon, Brazil
Status: offline

Hi,

are your clients only Web Proxy clients? If so, they only will be able to use ISA as a proxy. Meanning, the only protocols handled by ISA will be HTTP/HTTPS/FTP.

Since you want ISA act like a firewall (filtering all protocols), you must configure your clients as either SecureNAT or FWC.

Regards,
Paulo Oliveira.

_____________________________

Microsoft MVP - Forefront
MCP - ISA Firewall 2004
Blog: http://poliveirasilva.wordpress.com/
Twitter: https://twitter.com/poliveirasilva

(in reply to meniem)

Post #: 4

RE: Problem when allowing specific users to access inte... - 19.Dec.2010 2:51:35 AM

meniem

Posts: 6
Joined: 23.Sep.2010
Status: offline

quote:

ORIGINAL: paulo.oliveira

Hi,

are your clients only Web Proxy clients? If so, they only will be able to use ISA as a proxy. Meanning, the only protocols handled by ISA will be HTTP/HTTPS/FTP.

Since you want ISA act like a firewall (filtering all protocols), you must configure your clients as either SecureNAT or FWC.

Regards,
Paulo Oliveira.

Hi,

OK, I've configured the clients as a secure NAT. But i still have the same issue, which is pop3/smtp stop responding when using "users set" instead of "all users" in the users tab of the access policy.

Regards,

(in reply to paulo.oliveira)

Post #: 5

RE: Problem when allowing specific users to access inte... - 20.Dec.2010 7:27:29 AM

paulo.oliveira

Posts: 3470
Joined: 3.Jan.2008
From: Amazon, Brazil
Status: offline

Hi,

SecureNAT clients can not authenticate with ISA.

You should read this to know how ISA different ISA clients behave: http://technet.microsoft.com/en-gb/library/bb794762.aspx

Regards,
Paulo Oliveira.

_____________________________

Microsoft MVP - Forefront
MCP - ISA Firewall 2004
Blog: http://poliveirasilva.wordpress.com/
Twitter: https://twitter.com/poliveirasilva

(in reply to meniem)

Post #: 6