[isalist] Re: Think Outside the GUI challenge #2
- From: "Thomas W Shinder" <tshinder@xxxxxxxxxxx>
- To: <isalist@xxxxxxxxxxxxx>
- Date: Thu, 23 Nov 2006 10:03:41 -0600
Dear Jim,
You clearly don't know the Miracle and the Mystery of "hardware
firewalls".
Please call your Syphco rep for an Audience with the Bishop.
Thomas W Shinder, M.D.
Site: www.isaserver.org <http://www.isaserver.org/>
Blog: http://blogs.isaserver.org/shinder/
Book: http://tinyurl.com/3xqb7 <http://tinyurl.com/3xqb7>
MVP -- Microsoft Firewalls (ISA)
________________________________
From: isalist-bounce@xxxxxxxxxxxxx
[mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Jim Harrison
Sent: Wednesday, November 22, 2006 11:34 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: Think Outside the GUI challenge #2
That was a separate issue for cust #2.
..and before you go off, this deployment ("firewall" between ISA
& the LAN) is absurdly common.
At least 25% of the questions I field are for "ports needed
between ISA & CSS or Intra-array traffic".
<RFBS>
From: isalist-bounce@xxxxxxxxxxxxx
[mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Greg Mulholland
Sent: Wednesday, November 22, 2006 9:22 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: Think Outside the GUI challenge #2
pix in between the networks :)??
----- Original Message -----
From: Jim Harrison <mailto:Jim@xxxxxxxxxxxx>
To: isalist@xxxxxxxxxxxxx ; isapros@xxxxxxxxxxxxx
Sent: Thursday, November 23, 2006 4:16 PM
Subject: [isalist] Re: Think Outside the GUI challenge
#2
Nope; all IP & DNS settings and records are proper for
each deployment.
All CSS communication is proper.
All ISA storage data is proper.
Don't tell me you all give up so easy?
J
From: isalist-bounce@xxxxxxxxxxxxx
[mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Roy Tsao
Sent: Wednesday, November 22, 2006 8:26 PM
To: isalist@xxxxxxxxxxxxx; isapros@xxxxxxxxxxxxx
Subject: [isalist] Re: Think Outside the GUI challenge
#2
Maybe A record of each ISA node is not properly
configured in DNS.
----- Original Message -----
From: "Jim Harrison" <Jim@xxxxxxxxxxxx
<mailto:Jim@xxxxxxxxxxxx> >
To: <isapros@xxxxxxxxxxxxx
<mailto:isapros@xxxxxxxxxxxxx> >; <isalist@xxxxxxxxxxxxx
<mailto:isalist@xxxxxxxxxxxxx> >
Sent: Wednesday, November 22, 2006 11:31 PM
Subject: [isalist] Think Outside the GUI challenge #2
> http://www.ISAserver.org <http://www.ISAserver.org>
>
-------------------------------------------------------
>
> Just last week, I encountered an interesting scenario;
two separate
> customers using two completely different ISA plug-ins
hit exactly the
> same problem, although it manifested differently for
each.
>
> Cust #1
> Scenario: ISA 2004 EE, 4 array members W2K3 SP1,
separate CSS, all
> domain-joined.
> Problem: When requested, each array member produced a
wpad script that
> only included itself. In no case did the wpad script
list any of the
> other three array members.
>
> Cust #2
> Scenario: ISA 2004 EE, LARGE multiple-array
deployment, separate,
> multiple CSS, W2K3 SP1, all domain-joined.
> Problem: CARP requests continuously failed.
>
>
> In both cases, the same relative behavior for each
plug-in caused the
> problem - what was it?
>
>
> All mail to and from this domain is GFI-scanned.
>
> ------------------------------------------------------
> List Archives:
//www.freelists.org/archives/isalist/
<//www.freelists.org/archives/isalist/>
> ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
<http://www.isaserver.org/pages/newsletter.asp>
> ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
<http://www.isaserver.org/articles_tutorials/>
> ISA Server Blogs: http://blogs.isaserver.org/
<http://blogs.isaserver.org/>
> ------------------------------------------------------
> Visit TechGenix.com for more information about our
other sites:
> http://www.techgenix.com <http://www.techgenix.com>
> ------------------------------------------------------
> To unsubscribe visit
http://www.isaserver.org/pages/isalist.asp
<http://www.isaserver.org/pages/isalist.asp>
> Report abuse to listadmin@xxxxxxxxxxxxx
<mailto:listadmin@xxxxxxxxxxxxx>
>
All mail to and from this domain is GFI-scanned.
All mail to and from this domain is GFI-scanned.
Other related posts:
