RE: Problems accessing servers in DMZ
- From: "Thomas W Shinder" <tshinder@xxxxxxxxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Tue, 4 Feb 2003 19:04:53 -0600
Hi Christopher,
Are you using a split DNS, or somehow looping back from the external ISA
Server to access resources on the DMZ segment?
Thanks!
Tom
Thomas W Shinder
www.isaserver.org/shinder
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp
-----Original Message-----
From: cmrod20@xxxxxxx [mailto:cmrod20@xxxxxxx]
Sent: Tuesday, February 04, 2003 5:52 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Problems accessing servers in DMZ
http://www.ISAserver.org
This seems like it should be a simple problem but I am stumped. We have
two servers that are located in our DMZ, between our ISA Server and our
hardware firewall.
Currently I am testing the ISA Server and have it NOT to "Ask
unauthenticated users for identification." Wtih this option secure NAT
clients are able to access servers in the DMZ and so are web proxy
clients. However, if I enable "Ask unauthenticated users for
identification" I am not able to access servers in the DMZ. There is no
rule against accessing them and I have not made any changes to the LAT
or LDT. Weird thing is that even if I do provide authentication info
when prompted I get Error 403 - Access Denied.
Anyone have any suggestions?
thank you,
Christopher Rodriguez
Director of Information Technology
Trinity Episcopal School for Ministry
www.tesm.edu
724.266.3838
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
Other related posts:
