I have made group policy settings; will be more forceful in this scenario for me than firewall client!!! Your suggested settings won't work for blocking 3rd party browsers. ________________________________________ From: Ball, Dan [mailto:DBall@xxxxxxxxxxx] Sent: Thursday, March 24, 2005 7:27 AM To: [ISAserver.org Discussion List] Subject: [isalist] RE: possible fix RE: ISAserver.org - Review of SurfControl Web Filter 5.0 for ISA Server 2004 http://www.ISAserver.org From what I gathered from SurfControl, the "Automatically detect settings" option in IE detects the settings from the ISA server. The problem occurs because ISA throws in extra characters into the header of the packet (via the auto-detected settings), and SurfControl then tosses the packet as unreadable. I might not have the exact description correct, but that is the general concept of the problem. I was not able to get SurfControl to work with either the "Automatically detect settings' or "Use automatic configuration script" settings enabled. Leaving the proxy settings in place allowed SurfControl to filter the traffic properly, and since FWC would put those settings into IE, forcing them via GPO wasn't necessary. Does that clear it up? ________________________________________ From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx] Sent: Thursday, March 24, 2005 09:40 To: [ISAserver.org Discussion List] Subject: [isalist] RE: possible fix RE: ISAserver.org - Review of SurfControl Web Filter 5.0 for ISA Server 2004 http://www.ISAserver.org Hi Dan, I have to say that none of this makes sense to me. From what I understand, in order for this to work, you need to configure the clients as Web proxy clients. So, autodetect or manual proxy config should work fine. Tom ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: ara@xxxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx