The next step is to run Netmon on the ext nic on the ISA and that should tell you if the ping query or the ping response is failing. Greg -----Original Message----- From: Greg Mulholland [mailto:gmulholland@xxxxxxxxxxxxxxx] Sent: Monday, December 22, 2003 10:13 PM To: [ISAserver.org Discussion List] Subject: [isalist] Re: Simple ISA Setup Required http://www.ISAserver.org Roland As Jim mentioned all internal clients if they are securenat clients and are configured in the LAT should be able to ping any external machines. Given that you have enabled ip routing in ISA. Is the gateway of the internal machines set to the ISA's int interface (i.e securenat) Thanks Greg -----Original Message----- From: Rolland Basi [mailto:basi948@xxxxxxxxxxx] Sent: Monday, December 22, 2003 11:25 AM To: [ISAserver.org Discussion List] Subject: [isalist] Re: Simple ISA Setup Required http://www.ISAserver.org Hi Jim, Yes, undserstanding that browsing and ICMP are different, if browsing is possible does that mean I should be able to ping from other clients if the LAT Host and IP routing are configured? If the above are configured, what else do I need to do if Iam still not able to ping from other clients? Rgds Rolland >From: Jim Harrison <jim@xxxxxxxxxxxx> >Reply-To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> >To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> >Subject: [isalist] Re: Simple ISA Setup Required >Date: Thu, 18 Dec 2003 21:14:45 -0800 > >http://www.ISAserver.org > >Using your browser to access web pages and ICMP are two entirely >different matters. >In order for an internal client to use ICMP, you must: >1. configure the LAT host as a SecureNAT client 2. enable IP Routing in >IP Packet Filtering properties. > >If you can't accomplish both of these things, you can't ping across the >ISA. > > Jim Harrison > MCP(NT4, W2K), A+, Network+, PCG > http://isaserver.org/Jim_Harrison/ > http://isatools.org > Read the help / books / articles! > > >On Fri, 19 Dec 2003 14:55:56 +1000 > "Rolland Basi" <basi948@xxxxxxxxxxx> wrote: >http://www.ISAserver.org > >Hi All, > >I still have unsolved my problem after several times now uninstalling >and reinstalling my ISA Server. >The problem is that I can't ping my ISP from all other computers except >from the ISA Server itselft. > >I guess its my setup arrangements which is causing this problem. I >can't find any simple setup arrangement similar to mine after searching >the ISA Articles. > >My setup is as follows: >I have a leased lined to my ISP. At my end my setup is as follows: > >LAN (DNS, DHCP) ------>ISA Server ------> Cisco 800 series Router >-------> NTU(Leased Line Modem) -------> ISP > >My questions are, >1. Is there any article which I can refer to on how to configure my ISA >Server in regard to this setup? >2. Otherwise, is there a different setup arrangement that will enable >me to ping the ISP Server on other computers without reconfiguring the >Router or requiring other devices? >3. Why is it that Browsing is possible from all computers but >impossible for pinging even when ICMP Outbound IP Packet Filter and >Protocol rules to allow any request has been configured. > > >Pls I need your help. > >_________________________________________________________________ >The new MSN 8: smart spam protection and 2 months FREE* >http://join.msn.com/?page=features/junkmail > > >------------------------------------------------------ >List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist >ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp >ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ >------------------------------------------------------ >Other Internet Software Marketing Sites: >Leading Network Software Directory: http://www.serverfiles.com >No.1 Exchange Server Resource Site: http://www.msexchange.org Windows >Security Resource Site: http://www.windowsecurity.com/ Network Security >Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: >http://www.ntfaxfaq.com >------------------------------------------------------ >You are currently subscribed to this ISAserver.org Discussion List as: >jim@xxxxxxxxxxxx >To unsubscribe send a blank email to >$subst('Email.Unsub') > >------------------------------------------------------ >List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist >ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp >ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ >------------------------------------------------------ >Other Internet Software Marketing Sites: >Leading Network Software Directory: http://www.serverfiles.com >No.1 Exchange Server Resource Site: http://www.msexchange.org Windows >Security Resource Site: http://www.windowsecurity.com/ Network Security >Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: >http://www.ntfaxfaq.com >------------------------------------------------------ >You are currently subscribed to this ISAserver.org Discussion List as: >basi948@xxxxxxxxxxx >To unsubscribe send a blank email to >$subst('Email.Unsub') _________________________________________________________________ The new MSN 8: advanced junk mail protection and 2 months FREE* http://join.msn.com/?page=features/junkmail ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: gmulholland@xxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: gmulholland@xxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')