We have Small Business Server 2003 Premium, installed with default settings - integrated mode, all XP Pro clients, default rules and filters.
Everything seems to work fine, with one exception - certain programs are unable to get updates or downloads.
For example, AdAware won't update; we can't download Apple Quicktime, and we can't download Adobe Acrobat Reader.
I've discovered a workaround - by disabling the HTTP Redirector, all these things work. While this works, it's rather inconvenient to enable and disable the Redirector everytime someone wants to download.
What do we need to change in our configuration to allow these things to work? Or perhaps my question should be does caching provide any real benefit for a small (12 user) network? What do we lose by leaving HTTP Redirector disabled?
From: South Wales, UK
As for your question on caching: caching will benefit even two or three users. Whether you use it is dependent on you? For example, if you are using a pay-per-minute ISDN connection caching would be a must; if you've got a 2MB ADSL line then it isn't as important. But it always makes sense to travel the least distance. Why have twenty users downloading twenty times when the first's can be cached and everyone else can get the info. that much quicker? At the end of the day, the cachine side of ISA isn't much bother so you may as well use it. Another advantage is when it caches the Windows Update updates that SUS doesn't use -the recommended updates. Deploying the .NET Runtime Environment can be easier when it's cached than using the redistributable installation...
From: South Wales, UK
You describe a similar setup to me. I've granted all local (site) IP addresses working hours access to http, https and ftp. Then I grant Internet access via a group -in your case Internet Users. This way, a user can logon and access the web from anywhere.
Now I may be incorrect in my assumption that the client address set is needed so hopefully someone will clarify this as I've now got it out in the open...
Good article. I assume, however, that this is only the case if the HTTP Redirector is set to "Send to the web server"? Not when it simply redirects to the web proxy?