Re: Alerts Setting up ISA 2004

  • From: "Thomas W Shinder" <tshinder@xxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Fri, 30 Jul 2004 09:50:17 -0500

Hi Chris,

The Internal address range on the ISA firewall IS NOT THE LAT.

Enter only addresses that area reachable from that interface. Make sure
the routing table is correctly configured on the ISA firewall so that it
can correctly create the Internal Network address range from the
information in the Windows routing table.

HTH,

Tom
www.isaserver.org/shinder
Get the book!
Tom and Deb Shinder's Configuring ISA Server 2004
http://tinyurl.com/3xqb7
MVP -- ISA Firewalls



-----Original Message-----
From: Chris H [mailto:ntpro@xxxxxxxxxx] 
Sent: Friday, July 30, 2004 9:08 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: Alerts Setting up ISA 2004


http://www.ISAserver.org

do you mean if the ISA Server isnt physically on that subnet even though
it 
may be an internal one?
In the past I added all internal IP's to the LAT regardless of whether
or 
not the ISA server was on it.
Correct?

----- Original Message ----- 
From: "Jim Harrison" <jim@xxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Friday, July 30, 2004 9:53 AM
Subject: [isalist] Re: Alerts Setting up ISA 2004


> http://www.ISAserver.org
>
> ISA generally complains about this because:
> 1 -  you've excluded the broadcast addresses in the Internal network.
> 2 - you've defined off-subnet addresses for one or more netwrok
objects
> 3 - you have two or more default gateways
>
> Compare your "ipconfig/all" and your Internal Network addressing.
> If ISA doesn't belong to a subnet, remove it from that network object.
>
>  Jim Harrison
>  MCP(NT4, W2K), A+, Network+, PCG
>  http://isaserver.org/Jim_Harrison/
>  http://isatools.org
>  Read the help / books / articles!
>
>
> On Fri, 30 Jul 2004 09:33:58 -0400
> "Chris H" <ntpro@xxxxxxxxxx> wrote:
> http://www.ISAserver.org
>
> This is my first time setting up 2004 server and I am getting this
alert 
> all the time??
> I have it set up as an "edge" server. Two nics. One internal with all
the 
> 10.x addresses and one external with a 66.42.x.x address. Any ideas?
>
> Description: ISA Server detected routes through adapter "Local Area 
> Connection" that do not correlate with the network element to which
this 
> adapter belongs. The address ranges in conflict are: 
>
10.0.0.0-10.48.255.255;10.50.0.0-10.51.0.255;10.51.12.0-10.255.255.254;1
94.247.124.0-194.247.124.255;. 
> Fix the network element and/or the routing table to make these ranges 
> consistent; they should be in both or in neither. If you recently
created 
> a remote site network, check if the event recurs. If it does not, you
may 
> safely ignore this message.
> ISA Server detected routes through adapter "Local Area Connection 2"
that 
> do not correlate with the network element to which this adapter
belongs. 
> The address ranges in conflict are: 
>
194.247.124.0-194.247.124.255;10.0.0.0-10.48.255.255;10.50.0.0-10.51.0.2
55;10.51.12.0-10.255.255.254;. 
> Fix the network element and/or the routing table to make these ranges 
> consistent; they should be in both or in neither. If you recently
created 
> a remote site network, check if the event recurs. If it does not, you
may 
> safely ignore this message.
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:

> jim@xxxxxxxxxxxx
> To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:

> ntpro@xxxxxxxxxx
> To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist 


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist


Other related posts: