RE: SurfControl & SNAT

  • From: "Jim Harrison" <Jim@xxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Sat, 2 Apr 2005 10:29:59 -0800

It didn't.
Neither SurfControl nor WebSense work with clients that are *strictly*
FW or SNAT on ISA 2000.  They *can* work with ISA 2004 because a
fundamental design change that allows the web proxy to obtain
credentials for these users.


-----Original Message-----
From: Ball, Dan [mailto:DBall@xxxxxxxxxxx] 
Sent: Saturday, April 02, 2005 8:43 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: SurfControl & SNAT

http://www.ISAserver.org

Okay, so why do you think it worked with ISA2000, but not with ISA2004?

There must be some fundamental design difference where it doesn't do a
mass redirection of all web traffic through the proxy, like it did
before.  I just got your book in, so I'll start reading through that.

I'm not trying to be a pain, I'm just trying to comprehend what changed
to cause this massive problem we are now faced with.  I'm going to have
to do some major explaining next week, and I'd like to fully understand
what happened before I try to explain it to non-technical people.  I
can't go blaming SurfControl if they didn't cause the problem.


-----Original Message-----
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx] 
Sent: Saturday, April 02, 2005 10:04
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: SurfControl & SNAT

http://www.ISAserver.org

Hi Dan,

The Web proxy filter does what the HTTP Redirector used to do, but
better because is solves the authentication issues we used to have with
the HTTP Redirector.

HTH, 


Tom
www.isaserver.org/shinder
Tom and Deb Shinder's Configuring ISA Server 2004
http://tinyurl.com/3xqb7
MVP -- ISA Firewalls

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx

All mail to and from this domain is GFI-scanned.



Other related posts: