[isalist] Re: VPN

  • From: "Greg Mulholland" <greg@xxxxxxxxxxxxxx>
  • To: "ISA Mailing List" <isalist@xxxxxxxxxxxxx>
  • Date: Fri, 24 Mar 2006 17:35:41 -0400

in my very best Dr.Evil voice.... riiiiiiiiiiigh  t
 
You need to get out a bit more moffs.. hang the washing out like i just did, 
exilarating experience!
 
Greg

________________________________

From: isalist-bounce@xxxxxxxxxxxxx on behalf of Steve Moffat
Sent: Sat 25/03/2006 8:11 AM
To: ISA Mailing List
Subject: [isalist] Re: VPN



http://www.ISAserver.org
-------------------------------------------------------
 
And it's fun....:)

-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Young, Gerald G
Sent: Friday, March 24, 2006 4:45 PM
To: ISA Mailing List
Subject: [isalist] Re: VPN

http://www.ISAserver.org
-------------------------------------------------------
 
Andrew...

It's the concept that this list helps those who help themselves that
people are trying to express to you.

Case in point (since it's usually a good thing to "lead by example"):

I have a set of ISA servers publishing an OWA server.  Since the ISA
Servers are just ISA Server 2004 Standard Edition, we use BigIP F5 load
balancers in front of them.  All incoming requests for OWA are NAT'd to
a single IP address when they pass through the BigIP F5s.

Clients were complaining about OWA being extremely slow and
unresponsive.  Internal testing of OWA showed absolutely no issue with
OWA response.  We then tested OWA connectivity directly from the ISA
Servers themselves sitting in the DMZ and even from there, there were no
observed problems with OWA sluggishness.

Now, I could have sent out a question to this list asking about why that
might be.  Instead, however, I took a look at the sessions and logging
tabs of the Monitoring node.  Connectivity to the ISA Servers for OWA
was coming from only a single IP address, which was the BigIP F5 NAT'd
IP address so that looked fine.  In the Alerts tab, however, there was a
warning displayed indicating that the connection limit for the NAT'd IP
address had been reached.

Here again, I could have sent a message to this list asking for help
since I'm still relatively new to ISA and didn't know what that limit
was or even where to look for it.  Instead, I opened up ISA help and ran
a search on "connection limit".  That told me exactly what I needed to
know and once I removed the limit (temporary fix), the problem went
away.

And I did that all without asking a question to this list.

Now, had I still had a problem, I would have sent a message out,
explaining what the problem was, what I had done so far to diagnose and
address it, and ask for guidance on what to look at next.

That's called due diligence.

It's usually good etiquette to perform your own due diligence before
asking someone else to fix your problem.

That's what people on the list are asking you to do and since it doesn't
seem like you are, that's why you've been getting the responses you
have.

Cordially yours,
Jerry G. Young II
  MCSE (4.0/W2K)
Atlanta EES Implementation Team Lead
HHS Engineering
Unisys

11493 Sunset Hills Rd.
Reston, VA 20190
Office: 703-579-2727
Cell: 703-625-1468

THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY
MATERIAL and is thus for use only by the intended recipient. If you
received this in error, please contact the sender and delete the e-mail
and its attachments from all computers.
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Andrew English
Sent: Friday, March 24, 2006 2:50 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: VPN

http://www.ISAserver.org
-------------------------------------------------------
 

Well if I read the documents, manually, Microsoft's Tech forums what
would be the point of having this help forum/mailing list? No one would
need any help because as you say it's in ISA's help!

Andrew


-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Jim Harrison
Sent: Friday, March 24, 2006 9:39 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: VPN

http://www.ISAserver.org
-------------------------------------------------------
 
<sigh>
If I wanted to babysit, I'd have opened a nursery.
The help & articles were written by folks that have watched others go
through the same issues you're hitting.
It really is worth your time to read the docs before you post a FAQ.

-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Andrew English
Sent: Friday, March 24, 2006 5:08 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: VPN

http://www.ISAserver.org
-------------------------------------------------------
 

LOL if I wanted *nix help I would be asking in their forums.

-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Jim Harrison
Sent: Friday, March 24, 2006 12:16 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: VPN

http://www.ISAserver.org
-------------------------------------------------------
 
Yep - all explained the ISA help.

-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Andrew English
Sent: Thursday, March 23, 2006 6:47 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] VPN

http://www.ISAserver.org
-------------------------------------------------------
 


Is it possible to have the client connecting to use the DNS server of
the VPN server for resolve IP's instead of using it's normal DNS service
which are supplied by the network it connected from?

I can RDP into me the machines on the VPN network, even SSH to the Linux
boxes on the DMZ via their LAN IP addresses, but I can't connect via
their machine names.

Thanks
Andrew

------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx


All mail to and from this domain is GFI-scanned.

------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx

------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx


All mail to and from this domain is GFI-scanned.

------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx

------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx

------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx

------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/ 
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx



Other related posts: