none
ISA RRS feed

  • Question

  • i went share internet for my company and i have problem with my isa server.I cant config isa for share internet and cash about my favorits sit.thank for you
    Wednesday, February 24, 2010 9:54 PM

Answers

  • ISA Server has many built-in templates that should satisfy your needs.  The server should have two network adapters, and they should be labeled as Internal and External.  The internal adapter should be a non-routable IP address, and the external IP address is assigned by your ISP.  All NETBIOS functionality should be removed from your external adapter, along with Microsoft File Sharing services.  The default gateway should ONLY be located on the External adapter.  The DNS configuration information should ONLY be located on the Internal adapter.  Within ISA management console, ensure that the Internal adapter is configured with the internal IP address ranges.  Configure the Domain and IP Address tabs appropriately for your network.  In most cases, the ISA server should be joined to your Domain PRIOR to installing ISA.  The cache file size has to be set to a greater value than 0 before it will function.  That's the only requirement, and it should just work out of the box.  Make sure you specify a drive with enough free space.  Access rules need to be configured for each service you wish to use, and network objects should be used within these access rules.  Network objects include computers, computer sets, networks, ports, etc.  An access rule needs to be created from the DNS server to the external network for all users if you wish to resolve addresses internally.  If your DNS provider is external, create a rule allowing the Internal network set to access the External network using the DNS protocol for all users.  Also, ensure all clients are getting a valid IP address, Default Gateway, and DNS server.  Verify that you can ping the default gateway.
    • Marked as answer by Kevin Remde Sunday, April 11, 2010 1:12 PM
    Friday, April 9, 2010 7:16 PM

All replies

  • share your ISA with whom? how did you configure it? details are required
    http://ITDualism.wordpress.com
    Wednesday, March 3, 2010 1:37 PM
  • Ensure that you have firewall rule to allow HTTP/HTTPS from LAN to WAN, and DNS if needed for clients, I would assume a server though would be hosting your DNS so just make sure that can get DNS outbound. Is your ISA configured as a Proxy or Secure NAT?

    Brian LeBerth | MCSE 2003: Security | MCITP: ISA2006
    Wednesday, March 17, 2010 7:21 PM
  • ISA Server has many built-in templates that should satisfy your needs.  The server should have two network adapters, and they should be labeled as Internal and External.  The internal adapter should be a non-routable IP address, and the external IP address is assigned by your ISP.  All NETBIOS functionality should be removed from your external adapter, along with Microsoft File Sharing services.  The default gateway should ONLY be located on the External adapter.  The DNS configuration information should ONLY be located on the Internal adapter.  Within ISA management console, ensure that the Internal adapter is configured with the internal IP address ranges.  Configure the Domain and IP Address tabs appropriately for your network.  In most cases, the ISA server should be joined to your Domain PRIOR to installing ISA.  The cache file size has to be set to a greater value than 0 before it will function.  That's the only requirement, and it should just work out of the box.  Make sure you specify a drive with enough free space.  Access rules need to be configured for each service you wish to use, and network objects should be used within these access rules.  Network objects include computers, computer sets, networks, ports, etc.  An access rule needs to be created from the DNS server to the external network for all users if you wish to resolve addresses internally.  If your DNS provider is external, create a rule allowing the Internal network set to access the External network using the DNS protocol for all users.  Also, ensure all clients are getting a valid IP address, Default Gateway, and DNS server.  Verify that you can ping the default gateway.
    • Marked as answer by Kevin Remde Sunday, April 11, 2010 1:12 PM
    Friday, April 9, 2010 7:16 PM
  • Looking back all the post.. is interesting to see this forum have grow

    Guowen Su
    Cisco Certified Network Associate
    Cisco Certified Internetwork professional - MPLS
    Certified Information Systems Security Professional
    Microsoft Partner Network 2011
    Microsoft Certified Professional
    Microsoft Certified Systems Administrator:Security
    Microsoft Certified Systems Engineer: Security
    Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration
    Microsoft Certified Technology Specialist: Windows 7, Configuring
    Microsoft Certified IT Professional: Enterprise Administrator
    Microsoft Certified IT Professional: Server Administrator
    Certified Ethical Hacker
    Computer Hacking Forensics Investigator
    Certified Sonicwall Security Administrator
    Microsoft Geeks

    Tuesday, June 19, 2012 2:53 AM