Welcome to ISAserver.org

secure nat

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2000 Firewall] >> SecureNAT Client >> secure nat

Page: [1]

Message

<< Older Topic Newer Topic >>

secure nat - 14.May2001 5:37:00 PM

netadmin73

Posts: 8
Joined: 14.May2001
From: philadelphia, pa 19107
Status: offline

hello....the terminology 'secureNAT' is a bit vague. currently, i have a checkpoint firewall. ALL desktops and severs are pointed to its internal interface as the default gateway for web access....i would rather not use the 'web proxy' for internet access. with the checkpoint and also for cisco, when multiple machines would access the internet, it would do PAT(port address translation), so that all requests would appear as coming from one address, the firewall. will isa server do the same thing? i dont want to have to reconfigure every machine to use web proxy....i am forced to use this product since active directory wont work with cisco or checkpoint. can anyone please help? i would appreciate it if someone could reply to my email address below. THANKS!

jody

jlong@160over90.com

Post #: 1

Featured Links*

RE: secure nat - 14.May2001 9:16:00 PM

Toke'MUp

Posts: 1
Joined: 14.May2001
From: Belgium
Status: offline

Hi,

All my workstations have my ISA server as default gateway. And yes all requests come from the same address (ISA server)

Good luck

(in reply to netadmin73)

Post #: 2

RE: secure nat - 15.May2001 5:14:00 PM

tshinder

Posts: 47439
Joined: 10.Jan.2001
From: Texas
Status: offline

quote:
Originally posted by netadmin73:
hello....the terminology 'secureNAT' is a bit vague. currently, i have a checkpoint firewall. ALL desktops and severs are pointed to its internal interface as the default gateway for web access....i would rather not use the 'web proxy' for internet access. with the checkpoint and also for cisco, when multiple machines would access the internet, it would do PAT(port address translation), so that all requests would appear as coming from one address, the firewall. will isa server do the same thing? i dont want to have to reconfigure every machine to use web proxy....i am forced to use this product since active directory wont work with cisco or checkpoint. can anyone please help? i would appreciate it if someone could reply to my email address below. THANKS!
jody
jlong@160over90.com

Hi Jody,

ISA Server will do the same PAT that your other devices have done. So you're OK there.

You do not have to configure the browsers as Web Proxy clients, although you'll improve performance that way. However, your SecureNAT clients can still take advantage of the cache because of the HTTP Redirector Application Filter will send requests from the SecureNAT clients to the Web Proxy service automatically.

Check out my article on the SecureNAT client at www.isaserver.org/shinder.

HTH,
Tom

------------------
Tom Shinder
http://www.isaserver.org/shinder/

Get it Here!

(in reply to netadmin73)

Post #: 3

RE: secure nat - 19.May2001 4:16:00 AM

GSmith

Posts: 50
Joined: 24.Apr.2001
Status: offline

Actually, if you investigate Microsoft's IEAK (Internet Explorer Administration Kit, you could put together a build of IE that woudl use the ISA Server as a Web Proxy. Save it to your server, and give your users the URL to download/install the software.

This would give them the benefits of the Web Proxy without the desk-to-desk hassle of making changes at each machine.

And it would work using SecureNAT even without them installing the update, so there's no real rush.

------------------
Gregory W. Smith
MCSE+I, CCA, CNA

(in reply to netadmin73)

Post #: 4