Welcome to ISAserver.org

outgoing listeners for each ip address

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 General] >> General >> outgoing listeners for each ip address

Page: [1]

Message

<< Older Topic Newer Topic >>

outgoing listeners for each ip address - 22.Aug.2008 4:07:10 PM

mdistefano

Posts: 1
Joined: 10.Apr.2004
Status: offline

We're in the process up migrating from ISA2000 to ISA2006. I know there's no direct migration path for that, so we're starting from scratch. On our ISA2000 server we had 2 internal ip addresses on one nic. Under Array/Properties/Outgoing Web Requests we configured listeners for each of the ip addresses. One uses Basic and Integrated authentication, the other used just Basic. We then set group policy so most users browsers pointed to the Integrated ip address and a few (generic user accounts for shared pc's) pointed to the BASIC ip address. The generic accounts were denied internet access, thus forcing the users to enter their own credentials if the computer was logged into the domain with a generic account. (Don't ask. It was just a way to have multiple users get to the internet without creating lots of user profiles on the pc's). That worked fine for us.

The question is how to set up a similar solution on ISA2006? I don't see a way to separate authentication menthods by ip address. Can anyone help?

bighands

Post #: 1

Featured Links*

RE: outgoing listeners for each ip address - 24.Aug.2008 12:43:58 PM

tshinder

Posts: 47439
Joined: 10.Jan.2001
From: Texas
Status: offline

You won't be able to do that with the 2006 ISA firewall. However, you can enable both Basic and Integrated auth on the Web Proxy listener and if Integrated credentails aren't provided, the users will be able to enter Basic credentails.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to mdistefano)

Post #: 2