RE: SurfControl & SNAT
- From: "Crockett, Gregory" <Gregory.Crockett@xxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Tue, 5 Apr 2005 09:41:56 -0500
How would they directly connect to the Internet? On isa2000 ISAs http
redirect is in the way.
-----Original Message-----
From: Ara [mailto:ara@xxxxxxxxxxxxx]
Sent: Monday, April 04, 2005 5:01 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: SurfControl & SNAT
http://www.ISAserver.org
Have you tested that if they can bypass filter by directly accessing
internet instead of proxy?
-----Original Message-----
From: Crockett, Gregory [mailto:Gregory.Crockett@xxxxxxxxx]
Sent: Monday, April 04, 2005 2:22 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: SurfControl & SNAT
http://www.ISAserver.org
I operate isa2000 with snat for our wireless hot spot clients. No
authenication needed or wanted in this config.
-----Original Message-----
From: "David Farinic"<davidf@xxxxxxx>
Sent: 4/4/05 1:25:30 PM
To: "[ISAserver.org Discussion List]"<isalist@xxxxxxxxxxxxx>
Subject: [isalist] RE: SurfControl & SNAT
http://www.ISAserver.org
Yes, it might be a cause, however u can be sure only when developer
confirms...
Did you test it on ISA2000 with SNAT clients?
-----Original Message-----
From: Ball, Dan [mailto:DBall@xxxxxxxxxxx]
Sent: Monday, April 04, 2005 3:21 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: SurfControl & SNAT
http://www.ISAserver.org
Ah, okay, this makes much more sense. Can I summarize it by saying that
when browsing the web without using a proxy, it returns a slightly
different URL with ISA2004 than it did with ISA2000, which confuses the
SurfControl plug-in, causing it to ignore the request?
-----Original Message-----
From: David Farinic [mailto:davidf@xxxxxxx]
Sent: Sunday, April 03, 2005 10:25
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: SurfControl & SNAT
http://www.ISAserver.org
>>Okay, so why do you think it worked with ISA2000, but not with
ISA2004?
>It didn't.
This is the most probable reason why it might work for ISA2000 and not
for ISA2004:
One of the differences:
Example request with URL: http://xxx.com/test.txt from SNAT client
ISA proxy function for plugins:
GetServerVariable(pfc,"URL",&url[0],&dwSize))
Returns for SNAT&FW client
On ISA2004:
"/test.txt"
On ISA2000 same function for same clients returns:
"http://xxx.com/test.txt";
This change has to be considered by any ISA ISAPI Proxy plug-in working
with URLs.
Regards David Farinic.
This mail was checked for viruses by GFI MailSecurity.
GFI also develops anti-spam software (GFI MailEssentials), a fax server
(GFI FAXmaker), and network security and management software (GFI
LANguard) - www.gfi.com
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
gregory.crockett@xxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
ara@xxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
gregory.crockett@xxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
Other related posts:
