Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

RE: Client setup

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2000 General] >> General >> RE: Client setup Page: <<   < prev  1 [2]
Login
Message << Older Topic   Newer Topic >>
RE: Client setup - 18.Apr.2001 1:07:00 AM   
DBH

 

Posts: 14
Joined: 2.Apr.2001
Status: offline
quote:
Originally posted by isafan:
Just for kicks, try disabling that protocol filter and making a new one. Set that up for "selected protocols" and select all the HTTP and FTP protocols listed, apply it, and make sure it's running. Stop and start the ISA services (cache, firewall, and download I believe), then try connecting again. First from ISA itself, then from the client.

I tried the above and got the same results. I can browse from the ISA Server but not the client. Itsa-making-me-crazy.... But I bet I have set a record for number of ISA installs on one server.

Hey, Thanks for trying. - DBH


(in reply to DBH)
Post #: 21
RE: Client setup - 18.Apr.2001 5:21:00 AM   
Jazzguy

 

Posts: 17
Joined: 4.Apr.2001
From: New York, NY, USA
Status: offline
I had a similar problem and found I could get it solved by listing the internal NIC FIRST in the binding list. If it's not listed first, the DNS will not work properly and you won't be able to use SNAT.

(in reply to DBH)
Post #: 22
RE: Client setup - 18.Apr.2001 2:33:00 PM   
isafan

 

Posts: 31
Joined: 29.Mar.2001
Status: offline
Jazzguy,

That's interesting. Did your setup try to make the internal NIC listed as second in the binding order by default? Ours did. We were wondering about that, it seemed sort of odd. Especially in our case since our internal NIC is embeded. But even though it shows up as connection #2 everything still works fine.

DBH,

Have you tried enabling packet filtering and IP routing? This is something that I'm fairly certain should not have to be done, but it's worth a try. If you haven't, expand Access Policy, and right-click on IP Packet Filters the select properties. On that first properties sheet check the Enable Packet Filtering box, and the Enable IP Routing box. Then try getting out from the client again. This will also allow pings to work from inside the firewall too.


isafan


(in reply to DBH)
Post #: 23
RE: Client setup - 18.Apr.2001 4:44:00 PM   
DBH

 

Posts: 14
Joined: 2.Apr.2001
Status: offline
Jazzguy or anyone,
Can you explain to me what you mean by "bindings list"? The NT4 bindings list? Does ISA run on NT4? Anyway, this is a new network with only Win2K Pro, Win2K Server and Win2K Advanced Server.

(in reply to DBH)
Post #: 24
RE: Client setup - 19.Apr.2001 12:54:00 AM   
mlagase

 

Posts: 10
Joined: 19.Apr.2001
Status: offline
From the online help:
SecureNAT clients are not supported in cache mode. Are you running ISA in cache mode?

quote:
Originally posted by isafan:
DBH,

Out of curiosity, why do you not want to use the web cache on ISA? It's good, and fast. In general I'd say that it's best to have it on (using the web proxy settings in the browser).

I did experiment on a 2K Pro machine to make sure it works and it does.

I wonder if port 80 TCP is being blocked somehow. It should not be though with your protocol filter.

The really odd thing is that you said it worked when you set up the proxy settings in the browser, but FTP would not work.

Just for kicks, try disabling that protocol filter and making a new one. Set that up for "selected protocols" and select all the HTTP and FTP protocols listed, apply it, and make sure it's running. Stop and start the ISA services (cache, firewall, and download I believe), then try connecting again. First from ISA itself, then from the client.

I'm curious to see what happens after that.


isafan.



(in reply to DBH)
Post #: 25
RE: Client setup - 23.Apr.2001 3:01:00 AM   
DBH

 

Posts: 14
Joined: 2.Apr.2001
Status: offline
isafan,

I you tried your suggestion of enabling packet filtering and IP routing. I didn't make a difference. What the heck am I missing? This should be working. It is a dial-up connection. Are there any tricks that we did not cover earlier on this thread?

Thanks again, DBH


(in reply to DBH)
Post #: 26
RE: Client setup - 23.Apr.2001 4:12:00 AM   
Fire

 

Posts: 265
Joined: 19.Mar.2001
From: Ontario, Canada
Status: offline
I think the best way is install the Firewall Client on your client pc.
BTW, I think mlagase said is right. Check your ISA Server not in cache mode.

(in reply to DBH)
Post #: 27
RE: Client setup - 23.Apr.2001 4:12:00 AM   
Fire

 

Posts: 265
Joined: 19.Mar.2001
From: Ontario, Canada
Status: offline
I think the best way is install the Firewall Client on your client pc.
BTW, I think mlagase said is right. Check your ISA Server not in cache mode.

------------------
MicroSoft Fan
UNIX Fan
Linux Fan
*************************
True System Administrator


(in reply to DBH)
Post #: 28
RE: Client setup - 23.Apr.2001 1:17:00 PM   
DBH

 

Posts: 14
Joined: 2.Apr.2001
Status: offline
I have installed ISA in firewall only mode. Basically I want a firewall without having to go to each client and configure it. Also, some of the clients are mobile and travel to other networks.

Thanks, DBH


(in reply to DBH)
Post #: 29

Page:   <<   < prev  1 [2] << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2000 General] >> General >> RE: Client setup Page: <<   < prev  1 [2]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts