Does ISA recognize the domain of the clients? The POP3 users will need to
be firewall clients in order to authenticate based on Windows group. You
also have to restart the firewall service after creating the protocol rule
in order for the change to be immediate. Just a few things to try...
From: "Ron Watson" <ron_watson@xxxxxxx> Reply-To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Subject: [isalist] Protocol Rules and Authentication Date: Tue, 18 Mar 2003 14:40:46 -0700
http://www.ISAserver.org
I have a ISA standalone server configured between 2 routers in a NT domain. The HTTP Redirector filter is set to discard any SecureNat or Firewall clients, and all browser settings in the domain are configured correctly. Recently, I have had a need to give certain users access to POP3 accounts (the default was no POP3 for anyone). I created a rule to allow access to POP3 and SMTP and assigned it to the group in question. It did not work. If I configured the rule to allow all users access, it works just fine. Somehow, ISA is not authenticating the group properly. I considered trying Client Sets but control is not granular enough that way. Anyone have any ideas?
Regards, Ron
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as: papexpjboi@xxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
