Welcome to ISAserver.org

no secure nat

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> SecureNAT Client >> no secure nat

Page: [1]

Message

<< Older Topic Newer Topic >>

no secure nat - 9.Jul.2008 1:53:16 AM

naj

Posts: 18
Joined: 30.Apr.2008
Status: offline

Hi
I have 3 issues i want tobe solved pls

1- I would like to use secure nat for my users , I set the default getway as my ISA server what else should i do
2- If i set the forwarder on my internal dns to my ISA server what else can be configred on my isa server
3 when resolving root hits on my dns it says (an ip associated with the given ns-name server- record can not be found ) what is wrong

thank you

Post #: 1

Featured Links*

RE: no secure nat - 9.Jul.2008 4:03:48 AM

elmajdal

Posts: 5061
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline

Hi,

If you have installed SP2 for Windows Server 2003. Then check this : http://support.microsoft.com/kb/936594

also Check this : Internal DNS Forwarding Through ISA Server 2004/2006

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to naj)

Post #: 2

RE: no secure nat - 10.Jul.2008 12:49:44 AM

naj

Posts: 18
Joined: 30.Apr.2008
Status: offline

Hi tarek
thank you for prompt reply
Iam using a windows 2000 server and isa4 can pls help

(in reply to elmajdal)

Post #: 3

RE: no secure nat - 10.Jul.2008 4:20:54 AM

elmajdal

Posts: 5061
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline

Hi,

ok, then skip the If sentence and read the one below it.

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to naj)

Post #: 4

RE: no secure nat - 15.Jul.2008 2:56:56 AM

naj

Posts: 18
Joined: 30.Apr.2008
Status: offline

Hi Tarek
http://www.isaserver.org/tutorials/SecureNAT-SecureNET-Client-Guide-Universe.html
From what i read from this link i understod that
I am setting behind a router (complex network which means i have to set my default getway to my router and not to the ISA server but how can i set The routing infrastructure to support the SecureNAT client so that Internet-bound requests are forwarded to the internal interface of the ISA firewall. Figure 2 depicts the SecureNAT complex network scenario.The routing infrastructure must be configured to support the SecureNAT client so that Internet-bound requests are forwarded to the internal interface of the ISA firewall. Figure 2 depicts the SecureNAT complex network scenario.

thank you

(in reply to elmajdal)

Post #: 5

RE: no secure nat - 15.Jul.2008 4:10:04 AM

elmajdal

Posts: 5061
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline

Ok, so you have a network beind a network scenario.

Check this article : http://www.isaserver.org/articles/2004netinnet.html

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to naj)

Post #: 6

RE: no secure nat - 16.Jul.2008 2:11:34 AM

naj

Posts: 18
Joined: 30.Apr.2008
Status: offline

Hi tarek

I ccould not solve the problem reading this link
what i have is two routers connecting my two networks and the isa server is behind one of them and from either networks i could not connect to the internet using securenat my setup is as follows :
win2000 server isa4 and on my dns servers i set the forwarder as my ISA server
and my clients i am using the router as my DG but still no connection
one other issue when using webproxy with autodiscovery i am not able to access the internet eeventhough i used wpad wtih dns and can resolve wpad to my ISA
what else can i do pls ?
thank you

(in reply to elmajdal)

Post #: 7

RE: no secure nat - 18.Jul.2008 11:18:39 AM

elmajdal

Posts: 5061
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline

Hi,

do you have a network diagram so that i can understand how your network is setup.

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to naj)

Post #: 8