Judging by your very first sentence I can tell you that you aren't as smart as you think you are.

First off, if you need a book to harden Windows 2000 then you might want to reconsider calling people names. Second, I never said that the product didn't work at all. What I said is that it doesn't work like it should. I am not doubting that in your infinite wisdom you got it to let some traffic through. My point was that there is not ample documentation to support the features that don't work as advertised on the product. If you can get every single feature to work the way it is supposed to then you are the shit. I just doubt that you can.

On a non-technical note, don't start posts with, "You guys are just lame." It makes people take the rest of your post less seriously. It is not as if your attempting to insult us is going to get our attention and make us learn faster or something. I think you will find that life in general is nicer if you avoid being that way.

Anyway, have a good one.

Daniel

------------

What is wanted is not the will to believe, but the will to find out, which is the exact opposite.

Bertrand Russell

[This message has been edited by danielrm26 (edited 17 September 2001).]

If you guys find a magic formula for making this product work, let me know. I want to give it another go.

Also, do you guys know of a good Exchange forum? I am looking for one.

Regards,

Daniel

--------------

What is wanted is not the will to believe, but the will to find out, which is the exact opposite.

Bertrand Russell

[This message has been edited by danielrm26 (edited 17 September 2001).]

That's a pretty severe undocumented feature!

From their explanation, it doesn't look like there is a workaround if you don't use the all content groups option, even if you're using the Web Proxy client. I've not seen any documentation on this, but HTTPS does change how thing work big time when it comes to Site and Content Rules (but I don't need to tell you that).

Regarding the Yahoo thing, I don't recall if it was you, or someone else that brought this up a few weeks ago. I confirmed this finding and tried to come up with some MIME type that would play nice with this, such as configuring wildcards and such, but neither I no other other guy working on this was able to come up with a viable solution.

I agree that this is a feature that should work out of the box. Perhaps it'll be fixed in SP1?!?

Tom

quote:

---

Originally posted by MB:
Thanks, Tom.

My current issue with Microsoft (case SRX010807605006) deals (I think) with the standard Site and Content rule. It's currently wide open (any request to any site for all http content groups). It's the content groups tab that doesn't appear to work properly. For starters, if I check the 'Selected content groups' button and then check every goup (or 'select all'), and bounce the services, then I get NO https browsing. The documentation explicitly states that this tab has NO effect on https traffic. Microsoft last said this is 'by design' and sent me an unpublished Q article which is pasted below:

---

------------------
http://www.isaserver.org/shinder/



Get It Here!

reaper15

quote:

---

Originally posted by danielrm26:
Greetings,

If you guys find a magic formula for making this product work, let me know. I want to give it another go.

Also, do you guys know of a good Exchange forum? I am looking for one.

Regards,

Daniel

--------------

What is wanted is not the will to believe, but the will to find out, which is the exact opposite.

Bertrand Russell

[This message has been edited by danielrm26 (edited 17 September 2001).]

---

While it is not intuitive, the product does work. Since it is a BRAND NEW product (yea, yea, save the comments about an upgrade to Proxy), it is bound to have bugs.

Other than some configuration errors on my part with Ex2k and the SMTP filter, the product has worked well for me. Publishing web/ftp/mail servers, client browsing, etc. with no problems.

However, I did break my "Wait till the first sp" rule for this product from MS due to project time constraints. I keep a close eye on it just to make sure.

I have worked with other firewalls, and Linux as well. I have been around the processor enough to know that NO product is foolproof at version 1. Even Linux apps.

As for documentation, 4 years ago when I started tinkering with Linux, the documentation SUCKED, and the best response I could get from forums was, "Idiot Newbie, read the man pages." Most of which were in GERMAN (SUSE). The Linux documentation has changed greatly in the last few years, I am sure ISA will amass quite a few white papers over time too.

BTW, I am an MCSE, MCP+I, and am studying for the CCNA and win2k MCSE.

Try http://www.slipstick.com/ for exchange info as well.

[This message has been edited by Dominicon (edited 25 September 2001).]