Do you have any custom routes on those clients that point them to ISA2? Have you tried getting a network capture of the successful & failing tests and compared them? I promise - it's not ISA, but your environment. Any mistake you may have made with ISA is likely to be repeated with a "Linux box", just because us humans is such creatures of habit (especially nuns). -----Original Message----- From: Iain Gurney [mailto:iainpg@xxxxxxxxxxx] Sent: Wednesday, May 25, 2005 6:10 AM To: [ISAserver.org Discussion List] Subject: [isalist] RE: VPN from internal to multiple external servers http://www.ISAserver.org the local clients are set for ISA1 when i check ipconfig /all - all details are pointed toward isa1 starting to get out of my depth ? Iain >From: "Jim Harrison" <Jim@xxxxxxxxxxxx> >Reply-To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> >To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> >Subject: [isalist] RE: VPN from internal to multiple external servers >Date: Wed, 25 May 2005 06:04:30 -0700 > >http://www.ISAserver.org > >Outbound VPN access can only be performed from a SecureNAT client. >It sounds like your internal network (or hosts) is using ISA2 as the >default route to the Internet. >You'll have to change this so that it points to ISA1. > >-----Original Message----- >From: Iain Gurney [mailto:iainpg@xxxxxxxxxxx] >Sent: Wednesday, May 25, 2005 4:18 AM >To: [ISAserver.org Discussion List] >Subject: [isalist] VPN from internal to multiple external servers > >http://www.ISAserver.org > >Hi > >I have the following scenerio - isa1 and isa2 - both are setup with the >south sides on the lan - the north side both shaer the same 2mb leased >line > >I want to remove ISA2 but every time I remove this server (or even >diasble >the north nic) the internal lan cannot VPN out to any site. > >We can VPN in ok and ping the vpn sites from the lan > >I have checked access policies on both ISA servers and all other >settings >and they are identical, also checked RRAS as nothing seems out of joint > >I am truly stumped? > >May replace with a linux box > >No errors in event log or ISA log and service packs up to date > >Help my sanity please > >Iain > >------------------------------------------------------ >List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist >ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp >ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ >------------------------------------------------------ >Other Internet Software Marketing Sites: >World of Windows Networking: http://www.windowsnetworking.com >Leading Network Software Directory: http://www.serverfiles.com >No.1 Exchange Server Resource Site: http://www.msexchange.org >Windows Security Resource Site: http://www.windowsecurity.com/ >Network Security Library: http://www.secinf.net/ >Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com >------------------------------------------------------ >You are currently subscribed to this ISAserver.org Discussion List as: >jim@xxxxxxxxxxxx >To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist >Report abuse to listadmin@xxxxxxxxxxxxx > >All mail to and from this domain is GFI-scanned. > > >------------------------------------------------------ >List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist >ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp >ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ >------------------------------------------------------ >Other Internet Software Marketing Sites: >World of Windows Networking: http://www.windowsnetworking.com >Leading Network Software Directory: http://www.serverfiles.com >No.1 Exchange Server Resource Site: http://www.msexchange.org >Windows Security Resource Site: http://www.windowsecurity.com/ >Network Security Library: http://www.secinf.net/ >Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com >------------------------------------------------------ >You are currently subscribed to this ISAserver.org Discussion List as: >iainpg@xxxxxxxxxxx >To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist >Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx All mail to and from this domain is GFI-scanned.