SecureNAT clients can aceess internet without permission. (Full Version)

All Forums >> [ISA Server 2000 Firewall] >> SecureNAT Client



Message

tolgaygul -> SecureNAT clients can aceess internet without permission. (10.Oct.2005 9:35:00 AM)

Hi,

Yesterday I realised SecureNAT clients can aceess internet without permission.

Win200 SP4
ISA SP2
Integrated mode

(For outgoing web request "ask unauthenticated user for idendification" is checked )

When Automatically detect setting is sellected and proxy setting is not selected in internet connection settings o IE all the users can access internet without permission. When I unselect the Ip routing then they cant access but I have to use IP routing. Would you say what is wrong and how can I fix it. Thanks.

[ October 10, 2005, 09:46 AM: Message edited by: tolgaygul ]



bakhshi -> RE: SecureNAT clients can aceess internet without permission. (25.Apr.2007 2:28:32 AM)

quote:

ORIGINAL: tolgaygul

Hi,

Yesterday I realised SecureNAT clients can aceess internet without permission.

Win200 SP4
ISA SP2
Integrated mode

(For outgoing web request "ask unauthenticated user for idendification" is checked )

When Automatically detect setting is sellected and proxy setting is not selected in internet connection settings o IE all the users can access internet without permission. When I unselect the Ip routing then they cant access but I have to use IP routing. Would you say what is wrong and how can I fix it. Thanks.

[ October 10, 2005, 09:46 AM: Message edited by: tolgaygul ]



I've the same problem, I mean users can access the internet without setting proxy in their browsers, but I've not enabled IP routing!! really wanna know why and how?



bakhshi -> RE: SecureNAT clients can aceess internet without permission. (28.Apr.2007 6:13:05 AM)

You know, SecureNAT clients can no be authenticated, but Web proxies can.
If you just wanna disable securenat clients to access internet and make them set proxy on their browsers, then:
In application filter, go to "HTTP Redirector Filter " properties and select "Reject HTTP requests from Firewall and SecureNAT clients "

For more info read this article by Tom Shinder: http://www.isaserver.org/tutorials/Preventing_SecureNAT_and_Firewall_Clients_from_Bypassing_the_Web_Proxy_Service_andHow_to_Give_Yourself_a_Headache_with_the_HT.html



Page: [1]