RE: VPN digital certificate stopped working Part 2

  • From: "Thomas W Shinder" <tshinder@xxxxxxxxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Thu, 20 Feb 2003 22:22:44 -0600

Hi Dan,

If you want to publish the TS on the ISA Server itself and an internal
network server, bind the ISA Server's TS to the internal interface ONLY.

HTH,
Tom

Thomas W Shinder
www.isaserver.org/shinder 
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp

 
 


-----Original Message-----
From: Dan Bartley [mailto:bartleyd@xxxxxxxxxxxxxxxxxxx] 
Sent: Thursday, February 20, 2003 8:22 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: VPN digital certificate stopped working Part 2


http://www.ISAserver.org


You would be correct. It was just a happy coincidence of timing. 

I discovered that although the LAN TS connection started working to the
ISA server, the public side stopped working for the published TS server.
I had to reboot the ISA server anyway for another change and then
discovered that the published server started working again.
Unfortunately, the LAN side being able to connect to the ISA server
stopped working after the reboot. If I publish the ISA server for TS, it
does not work. It will only route the request to another server.

Best Regards,
Dan Bartley

-----Original Message-----
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx] 
Sent: Wednesday, February 19, 2003 20:29
To: [ISAserver.org Discussion List]

http://www.ISAserver.org


Hi Dan,

Hmmm. That's pretty interesting. There nothing in UDP that I can think
of that would require IP frags. Anyone out there who's smarter than me
have an idea why this would help?

Thanks!
Tom

Thomas W Shinder
www.isaserver.org/shinder 
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp 


-----Original Message-----
From: Dan Bartley [mailto:bartleyd@xxxxxxxxxxxxxxxxxxx] 
Sent: Wednesday, February 19, 2003 6:19 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: VPN digital certificate stopped working Part 2


http://www.ISAserver.org


BTW. A couple weeks ago someone posted about not being able to remote
desktop to the ISA server anymore on private or public side. I chimed in
that I was having the same problem. Apparently disabling the IP Fragment
filter fixed that as well. It now works.

Best Regards,
Dan Bartley

-----Original Message-----
From: Dan Bartley 
Sent: Wednesday, February 19, 2003 18:01
To: [ISAserver.org Discussion List]

http://www.ISAserver.org


Well. Ambidextrous and a wizard too. The IP Fragment filter was on. Once
I disabled it, the certificate worked fine.


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
bartleyd@xxxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')



------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')


Other related posts: