possible fix RE: ISAserver.org - Review of SurfControl Web Filter 5.0 for ISA Server 2004

  • From: "Ara" <ara@xxxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Wed, 23 Mar 2005 21:28:37 -0800

 

I think I have found a workaround for this. Today I got a call from surf 
control regarding the issue and fire fox clients by passing the filter. 
Accidentally I removed the proxy settings and set the internet explorer to use 
automatic detect settings. Guess what, even IE was bypassing the filter. What a 
nightmare. So I thought the case would be this control software's are not able 
to filter any direct access to internet, basically if the browser is not set to 
isa and port 8080, they won't be seen by filter and of course by pass the 
filter. On the other hand I needed my firewall client to be on as I wanted to 
do some application policies based on users. So we came up with this idea that 
set the browser setting using group policy to go through isa and port 8080.

Also going to networks, right click on internal and hit properties. Go to 
firewall client tab and get rid everything except the enable firewall client 
for this network. In this case users can still use applications based on 
firewall client and also any direct access or automatic with any browser 
including fire fox and IE will get a big deny from ISA. This will force them 
either go through proxy and get caught or do nothing. 

I also appreciate any help or comment on this method. Also if there is anyway 
to force a direct connection to go through proxy and get filtered

Hope this helps

________________________________

From: Ball, Dan [mailto:DBall@xxxxxxxxxxx]
Sent: Fri 3/18/2005 6:36 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: ISAserver.org - Review of SurfControl Web Filter 5.0 for 
ISA Server 2004


http://www.ISAserver.org


Adding in "Firefox/" into the filters helped, just got my first complaint from 
a Firefox fan about it not working anymore.

*       Error Code: 502 Proxy Error. The request was rejected by the HTTP 
filter. Contact your ISA Server administrator. (12217) 

________________________________

From: Ara [mailto:ara@xxxxxxxxxxxxx] 
Sent: Thursday, March 17, 2005 23:20
To: [ISAserver.org Discussion List]
Subject: RE: [isalist] RE: ISAserver.org - Review of SurfControl Web Filter 5.0 
for ISA Server 2004

 

Yes

I noticed the same thing. You can block IE not everything except IE

 

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as: 
ara@xxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx 

Other related posts: