Re: Firewall Client

  • From: "Jim Harrison" <jim@xxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Wed, 21 Jan 2004 08:27:25 -0800

Configuring the browser and installing the FW client are two separate matters.
The mistake most folks make is trying to use the 'global" IE configuration  
instead of the per-dialup9 settings.
In the case of your VPN client, you need to configure the proxy settings in the 
VPN connectoid properties.

 Jim Harrison
 MCP(NT4, W2K), A+, Network+, PCG
 http://www.microsoft.com/isaserver
 http://isaserver.org/Jim_Harrison
 http://isatools.org

 Read the help, books and articles!
----- Original Message ----- 
From: "Scott Force" <list@xxxxxxxxxxxxxxxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Wednesday, January 21, 2004 06:52
Subject: [isalist] Re: Firewall Client


http://www.ISAserver.org

Tom,
The printing problem is as follows.  I have a remote site with users who
have a public IP address with a printer with a public IP address (TCP/IP
port).  They are behind a firewall.  The users connect to my main office
through a MS VPN client and get an IP address from my DHCP server
(192.168.1.XXX).  When I have the Firewall client installed on their PC's
they can't print to the printer within their makeshift LAN, either
connected or not connected to the VPN.  If I remove the Firewall client
they can print connected or not connected to the VPN.  This wouldn't be a
problem if I could just configure their browser to get internet access
through my ISA server without the Firewall client which I evidently can't.

   

> Hi Scott,
> 
> What does your Web Proxy log show for these connection attempts? Are you
> sure there are no SSL connection attempts as the users automatically log
> onto those sites in the background?
> 
> Not sure why you would have printing problems with the VPN clients. Was
> it a name resolution issue?
> 
> Thanks!
> Tom=20
> 
> -----Original Message-----
> From: Scott Force [mailto:list@xxxxxxxxxxxxxxxxxxxxxxxxx]=20
> Sent: Tuesday, January 20, 2004 11:31 AM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] Re: Firewall Client
> 
> http://www.ISAserver.org
> 
> Q-2 Thanks Jim.  I had the Firewall client installed on the VPN clients
> and it was interfering with printing on the LAN.
> 
> Q-1 That's the really odd thing, they are not being required by the site
> for SSL connections.  These are basic sites like getting to the browser
> home page or any main page.  The users deafult web page is msn.com  When
> they open their browser they get the HTTP 403.4 error message.  If I
> type in from their browser http://www.yahoo.com I get the same error.
> This was working for them just fine Friday then Monday they began
> getting this error.  Very odd and it's only happening to a select few.
> Any other thoughts?  Like I mentioned, if I just add the ISA server as
> the default gateway on their pc, no problems.
> 
>  =20
> 
> > Q1 - The web site, not the client is the one requiring SSL.
> > Take a look in the web proxy logs; if the web site refused the
> connection for non-SSL, it'll be there.
> > My bet is that they're using a link that requires SSL.
> >=20
> > Q2 - no; they must be either Web Proxy or Firewall clients.
> >=20
> >  Jim Harrison
> >  MCP(NT4, W2K), A+, Network+, PCG
> >  http://www.microsoft.com/isaserver
> >  http://isaserver.org/Jim_Harrison
> >  http://isatools.org
> >=20
> >  Read the help, books and articles!
> > ----- Original Message -----
> > From: "Scott Force" <list@xxxxxxxxxxxxxxxxxxxxxxxxx>
> > To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
> > Sent: Tuesday, January 20, 2004 06:53
> > Subject: [isalist] Firewall Client
> >=20
> >=20
> > http://www.ISAserver.org
> >=20
> > What would cause a firewall client to start requiring a SSL connection
> 
> > for no reason?  I have about 3 Firewall Client users (out of 125=20
> > users) who get an error message in their browser that they must=20
> > connect to regular (yahoo, msn) webpages with an https connection. =20
> > They run 3rd party apps that need the Firewall client installed so my=20
> > SecureNat temp work around can't stay configured.
> >=20
> > Also, is there a way to configure remote VPN users to access my ISA=20
> > server for Internet without installing the Firewall Client?  Thanks,
> Scott.
> >=20
> > ------------------------------------------------------
> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=3Disalist
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=3DFAQ
> > ------------------------------------------------------
> > Other Internet Software Marketing Sites:
> > Leading Network Software Directory: http://www.serverfiles.com
> > No.1 Exchange Server Resource Site: http://www.msexchange.org Windows=20
> > Security Resource Site: http://www.windowsecurity.com/ Network=20
> > Security Library: http://www.secinf.net/ Windows 2000/NT Fax=20
> > Solutions: http://www.ntfaxfaq.com
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org Discussion List as:
> 
> > jim@xxxxxxxxxxxx To unsubscribe send a blank email to=20
> > $subst('Email.Unsub')
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=3Disalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=3DFAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org Windows
> Security Resource Site: http://www.windowsecurity.com/ Network Security
> Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
> http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to
> $subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as: 
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')



Other related posts: