I can ping but get a request time out, this is because I am a firewall client right, so what do I need to do to ping outside domains? Unistall firewall client? thats it?
Ever since I installed ISA, for about 6 months I have never been able to ping out from FW clients, only the SERVER, but now all of a sudden?!??! I need some kind of explanation please.
Thanks.
Oh yeah I am a registered user I just for got my password, and I think my name was mispelled. LOL
If your computer is configured as *only* a Firewall client, you will never be able to ping an external network client. The reason for this is that the Firewall client can only use TCP and UDP to communicate with external network hosts.
However, if you configure the client as *both* a SecureNAT and Firewall client, the SecureNAT client configuration will be able to pick up the ICMP request and forward it to the ISA Server, who in turn, forwards the request to the external network client.
How do you configure a machine for both? I did not change anything before I started pinging out, now a week later I am not able to ping out anymore again!?
You need to install the Firewall client software to make a machine a Firewall client. You need to change the default gateway to an address that will route Internet bound requests to the internal interface of the ISA Server to make the machine a SecureNAT client.
Tom, I have this same problem still - none of my client pcs can ping an address outside my internal network. My machines all have the firewall client software installed, they are pointing to the correct interface for a gateway. What I can't find is how to set up one of these machines to be a securenat client you have mentioned. Please explain how to make this change?
quote:Originally posted by tshinder: You need to install the Firewall client software to make a machine a Firewall client. You need to change the default gateway to an address that will route Internet bound requests to the internal interface of the ISA Server to make the machine a SecureNAT client. Tom
Posts: 262
Joined: 22.Dec.2003
From: The Netherlands
Status: offline
Dear GLRB,
first of all, Tom HAS given you the answer on how to make a client a SecureNAT client (set the gateway). Furthermore, for a ping to work with a SecureNAT cllient, you will need to create a protocol rule which permits outbound ping-requests for the those clients (protocol def. allready exists in ISA).