Questions tagged [isa-server]

155 questions
2
votes
3 answers

Can arbitrary email addresses be stored in AD userPrincipalName?

I have a web app that is front-ended by ISA, natively authenticating against AD. All users currently log on with sAMAccountName. I would like to allow users to provide a personal email address and be able to authenticate against this instead. From…
Rob Potter
  • 123
  • 5
2
votes
2 answers

ISA 2006 does not allow traffic using FQDN

I experience an issue accessing Tomcat running over SSL with MS ISA 2006 in front. When I access using the internal IP address (e.g. https://10.0.42.136/...) everything works fine and localhost_access_log. show me that the query returns a 200.…
sonstabo
  • 31
  • 1
  • 9
2
votes
4 answers

How to block SKYPE when it's using port 80 & 443?

How to block SKYPE when it's using port 80 & 443 in a network. ( better if I can do it by using ISA 2006 and without disabling web) I know if users can't install skype they wont be able to use it. So without that?
Thilina
  • 133
  • 1
  • 1
  • 5
2
votes
1 answer

IP address conflict with MAC address 00:00:00:00:00:00

One of our Windows 2003 R2 ISA firewall servers recently had a 1-hour spell of intermittent connectivity to our Internet WAN connection, which was fixed after disabling then re-enabling the network adapter. The error log showed multiple instances of…
2
votes
2 answers

TMG/ISA FWX_E_NETWORK_RULES_DENIED

I've got three disparit networks that all terminate at a TMG machine. I am trying to communicate between two of these networks, but the TMG firewall keeps dropping the connection as FWX_E_NETWORK_RULES_DENIED. This is seriously confusing, as I've…
Mark Henderson
  • 68,316
  • 31
  • 175
  • 255
2
votes
1 answer

ISA Proxy - HTTPS Traffic

We have an ISA 2006 setup for our organisations proxy. It's been working well for the last few months just blocking everything except a few allowed web site and web applications. We need to allow some people to access a web application hosted off…
x100
  • 21
  • 3
2
votes
3 answers

Are there other application layer firewalls like Microsoft TMG (ISA) that do advanced http rules?

Since the old days, ISA and now TMG have had several great features that I often want to deploy to my customers because of the enhanced functionality and security, but often the cost of an additinal server HW, Windows Server, and TMG license is too…
Bret Fisher
  • 3,963
  • 2
  • 20
  • 25
2
votes
3 answers

network topology including many services

I know this is yet another question on how to setup network but I hope you are not bored of such questions yet. The site is also an office, so it includes windows dc, windows ad, exchange, sql, file sharing, development app servers and other pcs. In…
mete
  • 157
  • 5
2
votes
1 answer

Using ISA to serve multiple servers as one domain

We use the www sub-domain to serve html, css, etc for our site. We also have a www1 sub-domain that routes traffic to our application server. So right now, ISA routes www traffic to ServerA and www1 traffic to ServerB. Are we able to create a folder…
Bjørn
  • 121
  • 2
2
votes
1 answer

Users loggin to 3Com switches authenticated by radius not getting admin priv and no access available with radius service down

Following the setup that I have for my Cisco devices, I got some basic level of functionality authenticating users that loggin to 3Com switches authenticated against a RADIUS server. Problem is that I can not get the user to obtain admin privileges.…
3D1L
  • 109
  • 3
  • 7
  • 13
2
votes
1 answer

Active Directory Group members of ISA Server 2006 user set not working on rule

When I add a global security group in Active Directory to a user set on ISA Server 2006, the rule using that user set does not take effect for members of the AD group. If I add a single user to the same user set however, it works just fine. Any…
jnhdny
  • 45
  • 6
1
vote
1 answer

ISA Server: How to troubleshoot DHCP problem?

I've added a DHCP Server to my ISA Server. The purpose of the DHCP server is to provide addresses to a DMZ (on its own interface) for misc computers that need internet access but don't need to be part of the domain (internal) network. I believe I've…
Dane O'Connor
  • 1,199
  • 2
  • 14
  • 20
1
vote
2 answers

Exchange 2007 - Exchange ActiveSync

We have ISA 2006 and Exchange 2007 and would like to get the Exchange ActiveSync to sync with non-windows base phones eg.Sony Ericsson... We got it to sync with Windows base phone ie. smart phone or PDA... but not able to get it to syc with Sony…
Wu
1
vote
1 answer

ISP Load Balancing with ISA 2006

I understand that ISA 2006 has an integrated Network Load Balancing feature. We also recently acquired a second internet line through a second service provider. I know it is possible to purchase a NLB router for using both incoming lines but this…
Bill Best
  • 165
  • 2
  • 8
1
vote
0 answers

Forefront 2010 (TMG): infinite redirection loop

The behaviour of the internal web server is to detect an incoming request over HTTP and respond with a 301 response to a HTTPS location (for all or only specific URLs), then TMG interferes and the HTTP Location header that is returned to the…
1
2
3
10 11