RE: Local browsing

  • From: Armando Treviño López <armando.trevino@xxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Wed, 10 Oct 2001 16:24:14 -0600

Well I don't know exactly the reason. I first configured the LAT including
the external interface of ISA, but i couldn't get SNAT service to work. 
Now I have not included that ip in the LAT and it works pretty well.

When the ip of the external interface was included in the LAT and I do a
tracert from a SNAT client to yahoo it stops in the LAN interface so maybe
the reason is that in this case the SNAT service doesn't know how to route
the traffic to internet because all of the IP address are taken as Local.

The web proxy and firewall services although have no problems in this case.

Armando.

-----Original Message-----
From: Stan Mitranic [mailto:Stan.Mitranic@xxxxxxxxx]
Sent: Wednesday, October 10, 2001 4:41 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Local browsing


http://www.ISAserver.org


Hmm, I'm not sure why it wouldn't work...After adding ISA Server's
external IP to the LAT table, everything seemed to function just fine,
and I could initiate connections from the server itself just like I can
from any firewall client...Could you explain in what way it disables
SNAT? Maybe I'm just setting myself up for trouble by doing this? 

Thanks,
Stan

-----Original Message-----
From: Armando Treviño López [mailto:armando.trevino@xxxxxxxxxxx]
Sent: Wednesday, October 10, 2001 3:23 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Local browsing


http://www.ISAserver.org


Yes, but in that case the SNAT Service will not function...
Armando.

-----Original Message-----
From: Stan Mitranic [mailto:Stan.Mitranic@xxxxxxxxx]
Sent: Wednesday, October 10, 2001 3:51 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Local browsing


http://www.ISAserver.org


Just as another solution to your problem, you could add your ISA
server's external IP to the LAT table...This will make the ISA server
behave (and adhere to all the rules) just like all the Firewall
clients...

Stan Mitranic

-----Original Message-----
From: Periyasamy, Raj [mailto:psraj@xxxxxxxxxxxx]
Sent: Wednesday, October 10, 2001 2:10 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Local browsing


http://www.ISAserver.org


Gabriel,
Thanks your solution worked. Created a packet filer and it works just
fine. 

Thanks to evryone who answered my question.

Regards,

Shanmuga Raj. P   (Raj) 
Infineum, Linden NJ
Information Technology
Phone: 1 (908) 474-2090 
Raj.Periyasamy@xxxxxxxxxxxx




-----Original Message-----
From: Gabriel Zabal [mailto:gabriel@xxxxxxxxxxx]
Sent: October 10, 2001 3:57 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Local browsing


http://www.ISAserver.org


If you have Packet Filtering enabled
The connnections that are being made from the ISA are filtered by the
engine.
So, if you want to browse from the server, you have two options:
1 - Create a packet filter that allow TCP conections outbound, from
local
port dynamic, to Remote port 80.
2 - Configure the IE to use the proxy, using the internal address of the
ISA
and the port 8870

I hope it clarifies you.

Gabriel Zabal
gabriel@xxxxxxxxxxx

----- Original Message -----
From: "Periyasamy, Raj" <psraj@xxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Wednesday, October 10, 2001 4:42 PM
Subject: [isalist] RE: Local browsing


> http://www.ISAserver.org
>
>
> Alvarado,
> Could you please explain more clearly, is this the browser
configuration
you
> are refering to? Have you done this and is it working?
>
> Regards,
>
> Raj
>
>
>
>
> -----Original Message-----
> From: Alvarado Jesus [mailto:Jalvarado@xxxxxxx]
> Sent: October 10, 2001 3:34 PM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: Local browsing
>
>
> http://www.ISAserver.org
>
>
> disable auto detect connection and setup the lan conenction like all
the
> other clients
>
> -----Original Message-----
> From: Periyasamy, Raj [mailto:psraj@xxxxxxxxxxxx]
> Sent: Wednesday, October 10, 2001 2:32 PM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] Local browsing
>
>
> http://www.ISAserver.org
>
>
> List members,
> My ISA Server is woking fine, I am able to connect from a client and
browse
> the web without any problems. However from the ISA server itself, I am
not
> able to use the browser. If I configure the browser to use a proxy it
works,
> however without a proxy it it is not able see any sites. I can ping to
all
> internet sites without any problem. However I cannot browse or FTP to
an
> Internet host from my ISA server directly. Has anyone faced any
similar
> problems. Any help would be appreciated.
>
> Regards,
> Raj
>
>
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> jalvarado@xxxxxxx
> To unsubscribe send a blank email to
$subst('Email.Unsub')
>
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> psraj@xxxxxxxxxxxx
> To unsubscribe send a blank email to
$subst('Email.Unsub')
>
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
gabriel@xxxxxxxxxxx
> To unsubscribe send a blank email to
$subst('Email.Unsub')


------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
psraj@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
stan.mitranic@xxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
armando.trevino@xxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
stan.mitranic@xxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
armando.trevino@xxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')


Other related posts: