Forefront Edge Security - Firewall Client Forum

Isa 2006 FW client strange issue with internal web sites

Thu, 23 Jul 2009 13:38:56 Z

Hi, i got an isa 2006 ent with 2 nic, internal 10.x and external with public IP.
All the clients have the Firewall client installed.
I've a DMZ (192.x) but is not directly connected to the ISA machine; the firewall client is configured, with LAT file, to bypass ISA for that range.
All the clients are 99% the same (ghost image, wsus forced update, GPO configuration).

I got a very strange issue with that....

On some machines all works fine.
On other random machines, i'm not able to browse internal (10.x site) and dmz (192.x) due to time out.

On those machines, if i disable the firewall client service or if i manually configure Internet Explorer (and or Firefox) to use a proxy and putting the exclusion for those sites, all works.

Unistalling and reinstalling the firewall clients on those bizarre machines didn't fix the problem.

Any suggestion/idea ?
Thanks in advance.

Windows 7 Forefront Installation

Mon, 16 Nov 2009 11:47:53 Z

Hey,

there is a problem, if I would like to install Forefront on Windows 7. We install forefront with WSUS and a GPO. Windows Server and all Windows XP Clients install the client automatically. If I check the gpresult, I could see the right GPO. But Windows 7 don't install Forefront.

Could anybody help me ?

Configure ADSL modem in ISA 2004

Thu, 05 Nov 2009 20:22:38 Z

Hi,
I installed ISA and made access roule.I have a ADSL modem and i want to configure PPPOE in ISA.When i go to
preference Dialup ,i dont have any PPPOE connection.So i cant configure it for connectivity to internt.
Thanks,
Reza

SVPN not working on ISA 2006 when firewall client is enabled

Thu, 29 Oct 2009 01:00:51 Z

Hi,

I'm trying to get SVPN (Sabre) to work with firewall client on ISA 2006. Where do I start?

MP3 Rocket connection

Wed, 14 Oct 2009 15:39:11 Z

I am trying to connect to MP3 Rocket to download some more music, but the past 2 days it will not connect. The program says its connecting, but beside the connection progress there is a icon that says firewall detected. I tried to turn off the firewall, but had no luck. If anyone can help me, I would greatly appreciate it. Thanks

Isa Server 2000 Configuration

Tue, 13 Oct 2009 05:28:16 Z

Hellow guys,

    I have a problem regarding my Isa server 2000, my setup is like this
    - I have DC server with DNS and DHCP (domain name is gbdistinc.local) Ip Add 192.168.11.245; 255.255.255.0 no Gateway
    - I have separate server for ISA Server with replicate DNS from main server Ip Add 192.168.11.244;255.255.255.0 no gateway primary dns is 192.168.11.245

- MY internal IP is 192.168.11.244 and my External is dynamic DSL dial up using PPPOE
Problem no1
Before ISA server was installed my nslookup to external IP was ok, but when ISA installed this is the result

C:\nslookup www.google.com.ph
Server: gbmainserver.gbdistinc.local
Address: 192.168.11.245

DNS request timed out.
timeout was 2 seconds.
*** Request to gbmainserver.gbdistinc.local timed-out

Problem No2
when im in Isa Server i can ping external IP, but when i try it to my workstation it doesnt work

Problem no3
I try to use IP Filters and enable the IP Routing and PPTP, adding new Rule for ICMP to work ping on client. It works but the problem is my pop3 and smtp configuration on Outlook was unable to send and receive email. This problem occur when IP routing was enabled. We have a VPN connection outside the netowrk thats why i need to enable IP Routing and PPTP to work.
When IP Routing Enabled and PPTP
VPN and Ping work but my outlook did not
When IP Routing Disabled
Outlook works fine but VPN and Ping did not.

Can anyone help my problem. I am new in ISA but i want to use and learn more about it. Is there any problem with my configuration. Thanks

Slowness on opening Office files when Firewall Client installed

Tue, 11 Mar 2008 10:06:49 Z

Hi, I have a laptop (HP nx7000) with Windows XP SP2 and Office 2003. All the Office aplications work fine, but when I install the Microsoft Firewall Client 2004 and you try to open Word, Excel... or double click on a file it takes around 20 seconds to open it. Once it is open and you do File --> Open it opens the file OK.

If I uninstall the Firewall Client everything works fine and fast again.

Anybody knows how can I fix this? I've searched the internet but couldn't find a solution. This problem is driving me crazy.

Thanks in advance.

Clear Old Data on repor from ISA?

Sat, 28 Mar 2009 12:23:51 Z

Hi

I want to clear old data that appears on the report of the ISA 2006 server- not cache- and the report must appears as tha ISA just satrted. Is this possible??
& If so how can I do that???

Thanx

certificate question

Wed, 16 Sep 2009 13:48:56 Z

Hi,

we did setup a new domain that called mydomain.local, and has a registerd domain that called mydomain.com.
This domain has an exchange 2007 and ISA 2006, we are going to use the Ex2007 as pop3 server and also for OWA for the mydomain.com (we did add mydomain.com as a accepted domain to the exchange 207), now we have to buy a certificate for use with OWA and ISA 2006.
here is my question,

I went to versian website and there I can get a certificate for 21 days trail, so first they asked I should create a SCR for the Webserver, does this means the IIS of the Exchange 2007? I did try to create an SCR for the exchange 2007 IIS, but as I said before this server has an .local domain, then when I did create the SCR I had to copy the genrated SCR and send it to versain, but when I send it to them I get this error that they can not issue a certificate for intranet (or .local domain I think!), so what does this live me with? or my internal domain have to be the same as my external domain?

Thanks,

SHahin

Shahin

isa 2006 and blocking web access to port 8443

Mon, 12 Nov 2007 23:38:08 Z

cannot get past web proxy rule to allow port 8443 as alternate port for ssl.

Add access rule and web proxy rule still blocks.

How to extend ssl to include 443 and 8443?

Log Write Time excessive on ISA 2006?

Sat, 11 Jul 2009 07:05:37 Z

Hi

I have a warning event appears everyday on my ISA 2006 server says the log write time took approximately 15 seceonds.........!
I tried what said on this article:
http://support.microsoft.com/default.aspx/kb/960925

But it still happening!!!!!!
Any idea please?

Question About ISA server 2006

Thu, 16 Jul 2009 22:38:59 Z

I hope every one have a good day

I have question

can I conect two DC (Domain Controller ) to one ISA server?
Note:
Each DC has different pollicy from another .For example,
I have two DC for two servers first DC for first server and second DC for second server
first one emploee DC for first server ,and LAB DC for second server
becouse, I want to make some pollicy to employee dc differ from LAB dc .like : I want to allow to all employee to see all sites
but I do not want to allow to users in LAB (computer lab) to see all sites from internet

that is right?or can I do it?

thanx

Windows Automatic Update client and Proxy Authentication

Sun, 28 Jun 2009 10:38:50 Z

Automaic Updates (AU) is client-side service used by Windows Update, Microsoft Update and Windows Server Update Services (WSUS). It runs in svchost.exe process in Local System context. Obviously, it requires Internet access in many scenarios. My quiestion is: how do I enable proxy authentication for this service?

As far as I know it is neither possible nor supported. The only working way to provide AU client with Internet access is the followintg:

Turn off mandatory proxy authentication (go to Networks -> Internal -> Properties -> Web Proxy -> Authentication -> uncheck "Require all users to authenticate").
Create a Firewall rule that allows HTTP and HTTPS traffic from AU client computers to your update services for "All Users".
(Optional) Use "Authenticated Users" or even more restrictive groups for all other Firewall rules if you want authenticate as many connections as possible.

I am pretty sure this is the only possible solution though I'm not very happy with it. But recently I found some very confusing information.

This thread in a mail list archive. Some users there reported their AU clients actually authenticated as domain computer accounts (DOMAIN\Computer$).
A couple of my friends (also very experienced ISA administrators) confurmed they have AU clients successfully authenticating and they performed no special manual configuration steps for it. They said it is native functionality of Firewall Client.

But as far as I know, FWC purpose is to authenticate user currently logged on to workstation, but not system services running in Local System context. So this sounds very confusing to me and I'd love to find some clarifications.

Thanks in advance

ISA 2000 Filter question

Tue, 16 Jun 2009 10:01:13 Z

Hi all,

We have had our SBS server in for many years now and it is all running very smoothly.

However, we recently installed some new Health and Safety software that does automatic updates, to do this we installed a database server on our server then a liveupdate programs on one of the client machines. The update program uses port 2069 so I did what I thought would open the port correct to let the program access the net.

Custom Filter
Direction: Inbound
Local Port Fixed
Port Number: 2069
Remote Port: All Ports

This wouldnt work but we thought it was perhaps that the program wasnt setup to use the proxy server so we added that in and it appears to be using that. However, whatever we do I cannot get the update program to access the internet and the developers say they do not know enough about ISA to understand why it is not working.

Any help would be greatly appreciated as I have tried everything I can think of (including altering the filter settings above to other options - possibly not the right ones mind! lol).

Network Monitor 3 Gets a Parser for the Firewall Client!

Tue, 09 Jun 2009 20:49:12 Z

http://blogs.technet.com/isablog/archive/2009/06/04/fwc-parser-for-netmon-3-3-on-codeplex.aspx

Go Get Some!

Jim Harrison Forefront Edge CS

Running a Windows Service behind ISA Firewall

Tue, 17 Mar 2009 19:54:11 Z

I'm not sure this is the correct forum, but hopefully I can get pointed in the right direction.

I have a custom windows service (.Net 3.5) that FTPs files out to some servers across the internet. The server hosting my service (Windows 2003) is behind an ISA firewall, and I need to connect through this proxy to transfer the files.

I had installed the ISA Firewall Client and all seemed well. The service (which runs under it's own domain level account) was able to FTP out okay. I even logged out of the server and started the custom service remotely to make sure there wasn't anything special about me being logged in that made everything work (my Infrastructure team tells me the server is okay to use the ISA proxy, and it's not account based).

Only there was.

It seems the ISA client cached me being logged into the server and allowed the service to FTP without issue for about a hour or so before it started getting denied.

I've been searching the net and docs trying to find guidance on how to configure ISA Server and Client to allow a Windows Service to use the ISA Firewall Client while no one is logged in, but so far nothing. Any help or guidance is greatly appreciated - even if it's "idiot, you use X for this" cause I'm having to make this stuff up as I go!

Thanks,
Mike

firewall client for mac ?

Fri, 26 Sep 2008 11:45:00 Z

hello.

Is there any firewall client for MAC computers ?

ISA 2006 & Special NAT

Wed, 25 Mar 2009 15:11:20 Z

Hi

I want to setup a special NAT on ISA server 2006 standard that allows a dedicated client to go out with IP address that is not the external IP address of the ISA. Is this possible??????

How to automatically configuring the ISA 206 Firewall client when use GPO to deploy?

Sun, 15 Mar 2009 17:30:01 Z

We want to use DHCP WPAD and AD GPO to deploy ISA 2006 Firewall Client software to over 100 computers.
And we need more additional task like automatically configuring the Firewall client and automatically hiding the Firewall client symbol from clients.
I can install the softwar by GPO, but i need to config it at client computer one by one.
I am new to GPO and ISA 2006. Any idea how can i do it? Many thanks.

Windows Update using Web Proxy Clients

Thu, 08 Jan 2009 05:11:05 Z

Hello Everyone,

I wanted to confirm if this is issue still an issue with ISA 2006. We have two ISA Server 2006 Std (Member Server) in a production environment. All Clients are running Windows XP Pro. All Users access internet using ISA Firewall Client. With Firewall Client "Windows Update" won't work. If we use Web Proxy Client, "Windows Update" works fine. Even on Servers, it won't work without Web proxy clients. I have gone through the following KB and made exact configuration for ISA Server 2006.

http://support.microsoft.com/?id=885819

any recommendation is much appreciated.

ISA 2000 Help

Fri, 20 Feb 2009 14:18:07 Z

Hello Guys,

I have a problem with setting up remote printing using ISA 2000.
Basically the setup is as follows

1x Router (Not Natting) into 1x firewall (Not Natting) into ISA 2000 which is Natting.

The local address of the server is 10.0.0.2

The External address of the server is 65.65.65.2

The local address of the router is 65.65.65.1

The Local address of the firewall is 65.65.65.3
the external address is 65.65.65.65 (for Example)

The local address of the printer is 10.0.0.150

The Gateway of the printer is 10.0.0.2

I have opened the ports in the firewall to allow port 9100 which is Ok; I have also set up a publishing rule for remote printing within the ISA 2000.

I have set my directjet port to 65.65.65.2 on the remote machine for printing

How ever I can still not print.

I have been to websites that test you ports and they all say port 9100 is open! I can also telnet into them ports from an external site.

I am not very familiar with ISA 2000 and am sure the error is all mine, if anyone could advise me in some way I would highly appreciate it

ISA firewall client, Vista, and BITS

Thu, 15 Jan 2009 00:17:40 Z

I was setting up a new Vista Business 64 bit machine the other day and all the updates before loading the ISA firewall client. After installing the firewall client BITS no longer will start. Has anyone else seen this problem before? If you uninstall the firewall client and reboot BITS will start back up. This has never been an issue before. I have loaded the firewall client previously in Vista 64 bit without any problems. That was pre SP1. So the only thing i can think of is either one of the updates prior to installing the firewall client messed it up, or something about SP1. The media I used has SP1 already on it.

Any ideas? In the XP machines the firewall client is a must for auto-updates to work but that doesnt seem to be the case in Vista.

Thanks

Where to install the ISA firewall client

Fri, 10 Oct 2008 21:36:27 Z

I am wondering if the firewall client should be installed on servers as well as workstations.

What server roles should the ISA Firewall client be installed on in the enterprise? Domain Controllers, ISA Servers, Exchange Servers, etc? Should the ForeFront Client be installed on every server or only on workstations?

Does the firewall client run as a service or does it only run interactively when a user is logged on?

Thanks,

Brian

FWCCreds.exe credentials

Wed, 11 Jun 2008 10:16:58 Z

Hi, everybody!

Can anyone tell me, whether it is possible to access credentials, saved by admin using FWCCreds tool, under the non-admin account?

I've tried to do this but always the 'Error: Unexpected error (0x80070005)' appears. As I know, this is the 'Access denied' error, but I couldn't find the files or registry keys that must be opened.

All I found, is that under non-admin user the 'lsass.exe' process can not (not with error message, just does not) go further than 'HKLM\SECURITY\Policy\' and 'HKLM\SECURITY\Policy\SecDesc', though the credentials are saved in 'HKLM\SECURITY\Policy\Secrets\MS_MSP_WSP_AppCredentials<app_name>'.

Also I know, that there were no such problems with the FWC for ISA 2000. And if I find and istall it, will it work with ISA 2006?

Thank you!

FWC version is 4.0.3442.654.

WPAD Entry For DNS and DHCP

Mon, 22 Dec 2008 00:22:36 Z

Hi,

I have two ISA Server deployed. One in main office and 2nd one in
Branch Office

Main Office and Branch Office is connected via private WAN. Users in Main office access internet through Main Office ISA. Branch Office Users access through Branch Office ISA. I have created DHCP WPAD 252 entry and DNS CNAME for Main Office ISA and DHCP clients works fine when I select automatic detect settings, it’s able to find Main Office ISA.

I have also created DHCP WPAD 252 entry for Branch Office, but when I select automatic detect settings in any of my Branch Office ISA Server it can't find Branch Office ISA, it finds Main Office ISA. I noticed there is only 1 entry in DNS called wpad.abc.com. When I tried to create DNS CNAME for Branch Office ISA Server it wants to replace the name for Main Office ISA Server.

What's the best way to have my Branch Office Servers to get automatic detect settings working?

ISA 04 IDS

Fri, 21 Nov 2008 13:54:40 Z

I've been working on my firewall trying to get it back up to where it used to be before a hard drive failure and no backup... i've only been working at this place for 3 months, so i didnt even know we had no backups. Anyway, i have been looking at my security logs in event viewer and i keep seeing failed logon attempts, and some successful attempts by anonymous logon from IPs i dont recognize. I just recently put my ISA server on the domain for backup purposes and thats when i stated noticing this. Is it normal to see these in my logs? I had an idea that it might be people logging in to their webmail from off campus(im net admin at a college). Would my isa server pick those up if theyre trying to get webmail?

Thanks,
Steve

ISA 2004 VPN and Internet Access?

Wed, 19 Nov 2008 14:07:18 Z

Here's my quandary. I think this pertains to a known issue with ISA 2004 (http://support.microsoft.com/default.aspx/kb/891195) so perhaps I'm at an impasse.

Our CEO travels between several of our remote sites. Our headquarters has ISA 2004 and his laptop uses the Microsoft Firewall Client for web proxy access and whatnot. This ISA 2004 box has site VPN's defined to connect to the remote sites, which have a mix of Cisco ASA and PIX devices on the other end.

When he visits these remote sites he is still being pointed to the HQ ISA 2004 box for web browsing access. Due to the known issue with ISA 2004 this won't work because he's piping in from a site VPN endpoint. So I have set him up with a couple of batch files he has to manually launch. When he's at a remote site he has to launch one that removes all of the WPAD registry entries from his system so Internet Explorer won't automatically detect the HQ web proxy. Then when he's back at HQ he launches the other batch file that puts these WPAD entries back into effect.

Is there any more elegant way of handling this behind the scenes? I don't want to install a separate caching web proxy at the remote sites since all of the other users don't see or care about the HQ ISA 2004 box. They all just go directly out of their Cisco devices for unrestricted Internet access. If I could do something programatically that would save me face, since batch files are rather crude to ask my CEO to remember each and every visit around :-)

How to control dynamic ports used by Winsock app with ISA 2006 Firewall Client

Thu, 30 Oct 2008 18:46:51 Z

Is there any way to restrict which ports a winsock application uses to connect to the ISA server when using the Firewall Client to make connections out to the Internet? For example for sending outbound SMTP - I need to use the Firewall Client on an Exchange 2007 Hub Transport server as I can't use SecureNAT as the Default Gateway will not route Internet bound traffic to the ISA Server. The complication however is that there is a Cisco Firewall module in between the Exchange Server and the ISA Server. As far as I can see when the Exchange Server wants to send SMTP it will make a connection to a randomish high port on the ISA Server e.g. 41266, 42596, 42598 etc. I need to be able to specify a sensible port or small range of ports to the Cisco Firewall admins (in addition to the Firewall Client's use of 1745 of course) on which the Exchange Server can connect to the ISA Server in order to send the SMTP.

So is there any way to control which port(s) the Exchange Server will connect to ISA on when it needs to make a port 25 connection to a server on the Internet? Is there anywhere the Firewall Client's use of high port above 40000 is even documented?

Regards
David Wilson

ISA 2006 SP1 server -> RADIUS servers - authentication problem

Thu, 02 Oct 2008 19:38:05 Z

On my ISA 2006 SP1 server (ISA-MLB), I can run the ISA Best Practices Analyzer Tool (IsaBPA). It checks, amongst other things, access to the RADIUS server(s).

The RADIUS servers for ISA-MLB are DC1-MED-MLB and DC2-MED-MLB.

The IsaBPA is showing a problem accessing both RADIUS servers.

When I visit these servers, both are showing this error:

Event Type: Error

Event Source: IAS

Event Category: None

Event ID: 17

Date: 10/2/2008

Time: 2:10:10 PM

User: N/A

Computer: DC1-MED-MLB

Description:

An Access-Request message was received from RADIUS client isa-mlb.atex.com without a message authenticator attribute when a message authenticator attribute is required. Verify the configuration of the RADIUS client in the Internet Authentication Service snap-in (the "Client must always send the message authenticator attribute in the request" checkbox) and the configuration of the network access server.

However, the settings on ISA-MLB, DC1-MED-MLB, and DC2-MED-MLB are all correctly set to use the message authenticator attribute. I’ve double-checked this and the shared secret as well.

So, to make sure that there wasn’t some other problem, I temporarily removed all settings to use the message authenticator attribute. Then, during an IsaBPA test, ISA-MLB was able to successfully connect to both RADIUS servers (the authentication failed, but that is to be expected from this test) as shown below:

Event Type: Warning

Event Source: IAS

Event Category: None

Event ID: 2

Date: 10/2/2008

Time: 2:05:12 PM

User: N/A

Computer: DC1-MED-MLB

Description:

User USER was denied access.

Fully-Qualified-User-Name = MEDIACOMMAND\USER

NAS-IP-Address = 134.128.43.42

NAS-Identifier = <not present>

Called-Station-Identifier = <not present>

Calling-Station-Identifier = <not present>

Client-Friendly-Name = isa-mlb.atex.com

Client-IP-Address = 134.128.43.42

NAS-Port-Type = <not present>

NAS-Port = 254214144

Proxy-Policy-Name = Use Windows authentication for all users

Authentication-Provider = Windows

Authentication-Server = <undetermined>

Policy-Name = <undetermined>

Authentication-Type = PAP

EAP-Type = <undetermined>

Reason-Code = 16

Reason = Authentication was not successful because an unknown user name or incorrect password was used.

After this, I reinstated all settings to use the message authenticator attribute. Then, during an new IsaBPA test, ISA-MLB was again no longer able to connect to either RADIUS server.

So, any ideas as to what might be the problem here?

Regards,

Douglas Nakamoto

ISA 2004 Browsing by IP

Mon, 29 Sep 2008 08:41:29 Z

Hi,

I have a problem with my new isa configuration.
I can't browse any website if my url is an IP.

The error : Error Code: 502 Proxy Error. The ISA Server denied the specified Uniform Resource Locator (URL). (12202)

For exemple, if i enter http://www.google.fr, it work. but if i enter an ip which belong to this domain, i have an error.

Many thanks.

Proxy Override

Thu, 02 Oct 2008 05:59:44 Z

Hi

I have a problem with the Isa firewall Client. We use proxy override setting in registry to get some homepages to go around Isa server.
The reason why we do this is that we use a site that we cannot access through ISA even with it as direct access (www.myedos.com).
I uses a header that is not supportet by ISA. before i upgraded and installed ISA firewall client there were no problem because we just put the sites into proxy override settings in the registry and it would access site through.
The problem is not the web browser automatic configuration thtat one is disabled.
When the firewall client is active it just skips the proxy override settings in registry.
If i disable firewall client it work again.
Anyone know if its possible to get the firewall client to accept the proxy override list in registry.

2004 Firewall Client slow

Mon, 11 Aug 2008 14:11:53 Z

Hi.

We have isa 2004 sp3

When browsing through the firewall client is very slow… when we browse with the proxy the speed is fine

Any help is greatly appreciated.

Welcome to the Forefront Edge Security Firewall Client Forum!

Sun, 18 Mar 2007 09:33:52 Z

Welcome to the Forefront Edge Security Firewall Client Forum!

In this space you can post ideas, questions, or issues that you encounter regarding the ISA Server Firewall client.

A broad range of IT professionals, Microsoft employees, and MVPs will take part in these discussions, which we expect to be interesting and helpful. We look forward to your participation.

Domain becomes unavailable after installing firewall client.

Sat, 31 May 2008 04:12:31 Z

Alright, instead of ripping my hair out, I decided to post somewhere where I could get some opinions from people who know what they're talking about. Google searches have returned nothing, it's quite frustrating.

But anyway, I've been having problems with ISA Firewall Client 2006 on a few machines. It works fine, until I reboot the computer. Then, it tells me that the "user cannot logon because domain X is unavailable" when I try logging in with a regular user. It won't allow me to rejoin the domain either.

It lets me log in, no problems, with domain administrator accounts, but gives me trouble when I use a regular user account. If I uninstall the firewall client, all is well again.

I didn't notice any odd behavior other than this, except that the firewall client can't detect the ISA server automatically (but appears to connect to it manually). So I pinged the server by its name and by the IP, and it replied, no problem.

Here's the kicker - this one computer lab of several in the building that we have to install the firewall client on. All labs work fine except this one, and the machines are identical to probably 80% of the rest of the computers in the building (the client is fully functional on those computers). This lead me to thinking that it's these particular computers themselves causing the problem and not the server. Correct me if I'm wrong in thinking that.

Software issue, perhaps? What kind of software would conflict? VNC is installed, that's the only thing that sets these computers apart from the rest. I haven't yet tried uninstalling it as I ran short on time, but I would like to know if it's a possibility before I go and do it?

Thanks in advance for any help you can provide. The computers are running Windows XP Pro SP2 and are Dell..something or others. I'm sorry for the sketchy details, I'm not in front of the machines at the moment :P

side notes:

-one out of 24 computers (#12) works correctly with the client installed. I cannot, for the life of me, figure out the difference between #12 and the rest. They are all the same image.
-they did, at one point in time, have an older version of microsoft firewall client on them. We uninstalled it because the server died & we had to replace it

come to think of it, I vaguely remember #12 still having the old client installed when I went to install the new one. After uninstalling & rebooting the machine, I installed '06.

I apologize for thinking to myself, but I suppose the more info I can give, the more I'll get back. Thanks again.

ISA Problem

Mon, 07 Jul 2008 06:07:48 Z

Dear All,

I installed ISA2006 Enterprise Edition SP1 on window server 2003 sp2 ,actually this server work just 3-5 min then it cant continue and stoped.then i tried to restart the server then he connect to the internet and allow all other users to connect.after 4 min its stopped. and doesn't allow the users to connect again.

Any usefull help
please Advice

Derar

What is the function of ISA firewall client?

Mon, 18 Aug 2008 21:13:27 Z

I just wanted to ask this question that what is the function of ISA firewall client?

Is it only used to connect the computer to the ISA Server ?

Question: When to use Firewall client instead of enterprise policy

Sun, 29 Jun 2008 20:42:40 Z

I am running isaserver enterprise 2006 and have always wanted a simple explanation regarding what the difference is between the Enterprise policy and firewall policy. How and when does one decide to use one over the other? What are the most common uses for creating a firewall policy and installing the client to a user's system?

Much thanks in advance to anyone who can explain this without going off into several paragraphs.

Keep it simple.

ISA Server FireWall Client

Thu, 08 May 2008 04:49:35 Z

hi all

I have a Windows Server 2003 Updated to SP3

Client: Windows Xp Sp2

i do install the the ISA 2006 Standard edition

and i do select the network adaptor and ip ranges

and i install the ISA 2006 Client on the client PC

my problem is that once i install the above the ISA client, the ISA client do not detect the ISA server

and i even try to look for the server at the workgroup computers but it s not shown there

Cannot Uninstall Microsoft Firewall Client from Windows 2003 x64 server

Wed, 16 Apr 2008 02:00:04 Z

Recently, Microsoft Firewall Client version 4.0.3442 was installed on our Exchange 2007 servers due to an incorrectly configured GPO. During our last maintenance window, I tried to uninstall it via Add/Remove Programs, but keep receiving the following error

Firewall Client cannont be installed on computers running a 64-bit Windows Operating System

I downloaded this version of the firewall client from the microsoft site and it says it supports 64-bit. Anyone have any ideas?

- Heath Bowlin

Client Name shown as username (?)

Wed, 05 Dec 2007 11:46:38 Z

Hi

When I check the logging it shows client name along with (?) for example Sam (?) or anonymous

Any help would be appreciated.

Harpreet