RE: SurfControl & SNAT

How would they directly connect to the Internet?  On isa2000 ISAs http
redirect is in the way.

-----Original Message-----
From: Ara [mailto:ara@xxxxxxxxxxxxx] 
Sent: Monday, April 04, 2005 5:01 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: SurfControl & SNAT

http://www.ISAserver.org

Have you tested that if they can bypass filter by directly accessing
internet instead of proxy?

-----Original Message-----
From: Crockett, Gregory [mailto:Gregory.Crockett@xxxxxxxxx] 
Sent: Monday, April 04, 2005 2:22 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: SurfControl & SNAT

http://www.ISAserver.org

I operate isa2000 with snat for our wireless hot spot clients.  No
authenication needed or wanted in this config.

-----Original Message-----
From: "David Farinic"<davidf@xxxxxxx>
Sent: 4/4/05 1:25:30 PM
To: "[ISAserver.org Discussion List]"<isalist@xxxxxxxxxxxxx>
Subject: [isalist] RE: SurfControl & SNAT

http://www.ISAserver.org

Yes, it might be a cause, however u can be sure only when developer
confirms... 
Did you test it on ISA2000 with SNAT clients?

-----Original Message-----
From: Ball, Dan [mailto:DBall@xxxxxxxxxxx] 
Sent: Monday, April 04, 2005 3:21 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: SurfControl & SNAT

http://www.ISAserver.org

Ah, okay, this makes much more sense.  Can I summarize it by saying that
when browsing the web without using a proxy, it returns a slightly
different URL with ISA2004 than it did with ISA2000, which confuses the
SurfControl plug-in, causing it to ignore the request?

-----Original Message-----
From: David Farinic [mailto:davidf@xxxxxxx] 
Sent: Sunday, April 03, 2005 10:25
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: SurfControl & SNAT

http://www.ISAserver.org

>>Okay, so why do you think it worked with ISA2000, but not with
ISA2004?
>It didn't.

This is the most probable reason why it might work for ISA2000 and not
for ISA2004:

One of the differences:

Example request with URL: http://xxx.com/test.txt  from SNAT client

ISA proxy function for plugins:
GetServerVariable(pfc,"URL",&url[0],&dwSize))
Returns for SNAT&FW client 

On ISA2004:
"/test.txt"

On ISA2000 same function for same clients returns:

"http://xxx.com/test.txt";

This change has to be considered by any ISA ISAPI Proxy plug-in working
with URLs.

Regards David Farinic.

  
This mail was checked for viruses by GFI MailSecurity. 
GFI also develops anti-spam software (GFI MailEssentials), a fax server
(GFI FAXmaker), and network security and management software (GFI
LANguard) - www.gfi.com 


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
gregory.crockett@xxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
ara@xxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
gregory.crockett@xxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx


Other related posts: