RE: Surfcontrol SNat and firewall clients - revisted. hotfix1

  • From: "Crockett, Gregory" <Gregory.Crockett@xxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Fri, 30 Sep 2005 15:57:27 -0500

The version of SC before the hotfix disregarded incoming HTTP traffic -
only outgoing authenticated web proxy client traffic.  Now this hotfix
monitors firewall, and anonymous snat clients, as well as the web proxy
clients.  This traffic rapidly increases the msde db.

 

greg

 

________________________________

From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx] 
Sent: Friday, September 30, 2005 3:21 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Surfcontrol SNat and firewall clients - revisted.
hotfix1

 

http://www.ISAserver.org

Ah - that's mo' clearer.

Bear in mind that the SC plugin is hooked into the web proxy filter,
which is notified of *all* HTTP traffic.

Consequently, no matter where the call originated or is destined, the SC
filter will hear of it.

 

-------------------------------------------------------

   Jim Harrison

   MCP(NT4, W2K), A+, Network+, PCG

   http://isaserver.org/Jim_Harrison/
<http://isaserver.org/Jim_Harrison/> 

   http://isatools.org <http://isatools.org/> 

   Read the help / books / articles!

-------------------------------------------------------

 

________________________________

From: Crockett, Gregory [mailto:Gregory.Crockett@xxxxxxxxx] 
Sent: Friday, September 30, 2005 13:16
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Surfcontrol SNat and firewall clients - revisted.
hotfix1

 

http://www.ISAserver.org

These clients are routed through ISA to different subnets.

 

________________________________

From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx] 
Sent: Friday, September 30, 2005 1:46 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Surfcontrol SNat and firewall clients - revisted.
hotfix1

 

http://www.ISAserver.org

What's the point of making internal clients go to ISA to reach internal
resources?

 

-------------------------------------------------------

   Jim Harrison

   MCP(NT4, W2K), A+, Network+, PCG

   http://isaserver.org/Jim_Harrison/
<http://isaserver.org/Jim_Harrison/> 

   http://isatools.org <http://isatools.org/> 

   Read the help / books / articles!

-------------------------------------------------------

 

________________________________

From: Crockett, Gregory [mailto:Gregory.Crockett@xxxxxxxxx] 
Sent: Friday, September 30, 2005 06:01
To: [ISAserver.org Discussion List]
Subject: [isalist] Surfcontrol SNat and firewall clients - revisted.
hotfix1

 

http://www.ISAserver.org

Some months ago Surfcontrol released a hotfix for their version 5 on ISA
2004 - I just learned of the release and installed.  Yes, it now
monitors SNAT and firewall clients.  Our install monitors and interacts
with incoming web request to our internal web sites.  Has anyone else
seen this with this hotfix?

 

greg

 

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx 

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
gregory.crockett@xxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx 

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx 

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
gregory.crockett@xxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx 

All mail to and from this domain is GFI-scanned.

Other related posts: