Welcome to ISAserver.org

Preventing users from disabling ISA Firewall Client

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 General] >> General >> Preventing users from disabling ISA Firewall Client

Page: [1]

Message

<< Older Topic Newer Topic >>

Preventing users from disabling ISA Firewall Client - 11.Jul.2013 6:10:40 AM

RobinINL

Posts: 1
Joined: 11.Jul.2013
Status: offline

Hi,

I am using ISA Server 2006, Standard Edition.

Some users in my company are disabling Firewall Client from their computer( By unchecking "ENABLE MICROSOFT FIREWALL CLIENT FOR ISA SERVER") and surfing internet in blocked hours.

Someone please provide me a solution for this

Post #: 1

Featured Links*

RE: Preventing users from disabling ISA Firewall Client - 11.Oct.2013 8:45:11 AM

pwindell

Posts: 2244
Joined: 12.Apr.2004
From: Taylorville, IL
Status: offline

The Clients need to be Web Proxy, Firewall [Winsock Proxy] clients and SecureNAT Clients at the same time.

Enforce the proxy settings with WPAD

The only way to bypass the hours is to be surfing out via a different Rule that does not have restrictions, most likely anonymously which lets them use the SecureNAT Service after they disable the Firewall Client, although I think the same would be possible via the Web Proxy Service if there was a non-restricted rule allowing that.

Bottom line, I think you have a design flaw in the rules you created and the way/order they are listed in. You need to inventory and inspect you rules.

In the end disabling the Firewall Client should never "gain" the user anything,...in a properly configured setup disabling the Firewall Client would simply take away the benefits they had from it,...so they "lose" rather than "gain".

_____________________________

Phillip Windell

(in reply to RobinINL)

Post #: 2