Re: Firewall Client Installation Problem
- From: "Jim Harrison" <jim@xxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Fri, 25 Oct 2002 08:25:22 -0700
There seems to be a bit of confusion (and unasked questions) here.
First, you have to decide what kind of access controls and accounting you
need.
a. if you want to control and log HTTP access according to user or
group, then you need to have user authentication. This is only available
via the Web Proxy or Firewall service
b. if you want to control and log web access based on content as
well, then the Web Proxy service is your only option, as the Firewall
service doesn't delve into "content". Note that this may also apply when
using some third-party content filters, such as SurfControl.
Options (a) and (b) requires that the user access the ISA via the Web Proxy
service; this means that FW and SecureNAT clients aren't supported for
authenticated web access, since the HTTP Redirector drops credentials.
If you don't care about controlling and/or logging based on user
credentials, then drop the proxy settings and set the HTTP Redirector to
"forward to requested web server" and it'll work "just like Proxy 2".
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://isaserver.org/pages/author_index.asp?aut=3
http://isatools.org
Read the help / books / articles!
----- Original Message -----
From: "Mayo, Bill" <bemayo@xxxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Friday, October 25, 2002 7:47 AM
Subject: [isalist] Re: Firewall Client Installation Problem
http://www.ISAserver.org
As an additional note, I have been looking at different settings to try and
find a workaround. I setup the ISA server in Integrated Mode. It looks
like this may be the reason that I have "mixed" settings (web proxy for web
activity even with the Firewall Client). To be able to have everything work
through WinSock, should I change this to Firewall mode instead?
Bill Mayo
Pitt County MIS
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
Other related posts:
