[isalist] Re: ISA 2004 auto configuration issues

  • From: "Thomas W Shinder" <tshinder@xxxxxxxxxxx>
  • To: <isalist@xxxxxxxxxxxxx>
  • Date: Mon, 30 Oct 2006 15:08:25 -0600

Hi Raj,
 
My bad. I didn't realize that you had the DREADED "required all users to
authenticate" option enabled. I've NEVER enable that option.
 
Undo that setting and all should be good.
 
Thomas W Shinder, M.D.
Site: www.isaserver.org <http://www.isaserver.org/> 
Blog: http://blogs.isaserver.org/shinder/
Book: http://tinyurl.com/3xqb7 <http://tinyurl.com/3xqb7> 
MVP -- Microsoft Firewalls (ISA)

 


________________________________

        From: isalist-bounce@xxxxxxxxxxxxx
[mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Periyasamy, Raj
        Sent: Monday, October 30, 2006 2:55 PM
        To: isalist@xxxxxxxxxxxxx
        Subject: [isalist] Re: ISA 2004 auto configuration issues
        
        
        Tom, Neither worked. However, If I uninstalled the F/W client,
then IE started auto detecting the proxy. I will reboot the array when I
get a chance to see if that helps. Looks like KB885683 is the solution,
I did restart the Firewall service after applying the script. I will
reboot and see if that helps.
         
        Thanks for the inputs.
         
        Regards, 
        Raj Periyasamy 
        MCSE(Messaging), CCNA 


________________________________

        From: isalist-bounce@xxxxxxxxxxxxx
[mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Thomas W Shinder
        Sent: Monday, October 30, 2006 11:38 AM
        To: isalist@xxxxxxxxxxxxx
        Subject: [isalist] Re: ISA 2004 auto configuration issues
        
        
        RE: Firewall clients.
         
        Mirror non-domain user accounts on the ISA Firewall.
         
        HTH,
        Tom
         
        Thomas W Shinder, M.D.
        Site: www.isaserver.org <http://www.isaserver.org/> 
        Blog: http://blogs.isaserver.org/shinder/
        Book: http://tinyurl.com/3xqb7 <http://tinyurl.com/3xqb7> 
        MVP -- Microsoft Firewalls (ISA)

         


________________________________

                From: isalist-bounce@xxxxxxxxxxxxx
[mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Periyasamy, Raj
                Sent: Monday, October 30, 2006 10:34 AM
                To: isalist@xxxxxxxxxxxxx
                Subject: [isalist] Re: ISA 2004 auto configuration
issues
                
                
                Anyone, any thoughts ?
                 
                 

________________________________

                From: isalist-bounce@xxxxxxxxxxxxx
[mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Periyasamy, Raj
                Sent: Friday, October 27, 2006 1:38 PM
                To: isalist@xxxxxxxxxxxxx
                Subject: [isalist] ISA 2004 auto configuration issues
                
                

                I have an ISA 2004 Ent array, configured to publish auto
configuration information on port 80. Latest service packs applied. ISA
server is configured to allow access only to a specific Windows group of
users. Everything works fine from any workstation that is a member of
the same AD domain, auto detection works IE works fine, and the ISA FW
client detects the ISA Server 2004. But the problem occurs when a
visitor whose laptop belongs to different AD domain plugs into our
network. When the laptop is plugged into our network, the ISA 2004 FW
client in the laptop does not detect the proxy, neither does the IE
browser. If I manually configure the proxy for the IE, then it works,
but ISA FW client doesn't work even if the ISA server is manually
configured. I enabled anonymous access privileges for the IP address of
the laptop, and still no use, auto configuration does not work. I found
the following article, 

                http://support.microsoft.com/kb/885683/
<http://support.microsoft.com/kb/885683/>  

                Made the changes as suggested for the enterprise
edition, restarted the Firewall services. Still no good. Any
suggestions? All clients are Windows XP Pro SP2.


                Thanks a lot. 


                Regards, 
                Raj Periyasamy 
                MCSE(Messaging), CCNA 


Other related posts: