Welcome to ISAserver.org

where IS NAT implemented, in kernel mode?in user mode?

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> SecureNAT Client >> where IS NAT implemented, in kernel mode?in user mode?

Page: [1]

Message

<< Older Topic Newer Topic >>

where IS NAT implemented, in kernel mode?in user mode? - 12.Oct.2004 1:16:00 PM

yesme

Posts: 6
Joined: 12.Oct.2004
Status: offline

where IS NAT implemented, in kernel mode?in user mode?
thanks:)

Post #: 1

Featured Links*

RE: where IS NAT implemented, in kernel mode?in user m... - 12.Oct.2004 6:30:00 PM

ClintD

Posts: 1833
Joined: 26.Jan.2001
From: Keller, TX
Status: offline

If the traffic just goes straight through, without any appliction layer filtering, then it is is Kernel Mode. As soon as an application filter notifies the Firewall Service (and thereby notifies the Firewall Engine), then it gets processed in User Mode.

All Firewall Client traffic is User Mode as the Firewall Client Listener is in User Mode.

If you create an Access Policy to allow HTTP for SecureNAT clients, by default, it gets processed in User Mode since the Web Proxy component notifies the Firewall Service that it is interested in all HTTP traffic. You can disable the Web Proxy filter per rule though so HTTP can benefit from Kernel Mode processing.

[ October 12, 2004, 06:32 PM: Message edited by: ClintD ]

(in reply to yesme)

Post #: 2

RE: where IS NAT implemented, in kernel mode?in user m... - 13.Oct.2004 8:58:00 AM

yesme

Posts: 6
Joined: 12.Oct.2004
Status: offline

Very thankful!

(in reply to yesme)

Post #: 3

RE: where IS NAT implemented, in kernel mode?in user m... - 26.Oct.2004 12:16:00 AM

Justin

Posts: 13
Joined: 22.Feb.2002
Status: offline

Clint,

Can I ask how you disable the http proxy filter for a rule? I want to disable it for my Internal to External allow all protocols rule to hopefully improve performance and can only seem to find it on each individual protocol to disable.

Also do you know how the setting for enable ip routing works, does it improve performance or change behaviour at all?

Thanks,

Justin

[ October 26, 2004, 12:16 AM: Message edited by: Justin ]

(in reply to yesme)

Post #: 4