[isalist] Re: Can't get Ping to work on my second TMG Enterprise Array setup

  • From: Jerry Young <jerrygyoungii@xxxxxxxxx>
  • To: isalist@xxxxxxxxxxxxx
  • Date: Wed, 31 Aug 2011 12:31:15 -0400

Eric,

Take a look at your network settings on each interface and make sure those
match the address ranges on the Network Elements in TMG.

On Tue, Aug 30, 2011 at 1:10 AM, Jim Harrison <Jim@xxxxxxxxxxxx> wrote:

> http://www.ISAserver.org <http://www.isaserver.org/>
> -------------------------------------------------------
>
> Eric,
>
> Make sure you updated the TMG network configuration to match the new TMG
> installation.
> This doesn't happen automagically.
>
> Jim
>
> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
> On Behalf Of Eric Holtzclaw
> Sent: Monday, August 29, 2011 10:14 AM
> To: isalist@xxxxxxxxxxxxx
> Subject: [isalist] Can't get Ping to work on my second TMG Enterprise Array
> setup
>
> http://www.ISAserver.org <http://www.isaserver.org/>
> -------------------------------------------------------
>
> I have copied my settings from a working TMG Enterprise Array setup, and I
> can't ping; even though I have so many rules to allow it
>
>
> Logs says
>
> Denied Connection TMG1 8/26/2011 1:58:35 PM Log type: Firewall service
> Status: The policy rules do not allow the user request.
> Rule: [Enterprise] Default rule
> Source: External (10.x.4.8:2048)
> Destination: Local Host (10.x.4.42)
> Protocol: PING
>  Additional information
> Number of bytes sent: 0 Number of bytes received: 0 Processing time: 0ms
> Original Client IP: 10.x.4.8
>
> My managements server Ping is spoofed?
>
> Denied Connection TMG03 8/26/2011 4:01:21 PM Log type: Firewall service
> Status: A packet was dropped because Forefront TMG determined that the
> source IP address is spoofed.
> Rule: None - see Result Code
> Source: Internal (10.x.205.83:2048)
> Destination: Local Host (10.x.4.42)
> Protocol: PING
>
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials:
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx
>
>
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials:
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx
>
>


-- 
Cordially yours,
Jerry G. Young II, CISSP
Microsoft Certified Systems Engineer
Young Consulting & Staffing Services Company - Owner
www.youngcss.com

Other related posts: