+ Post New Thread
Results 1 to 7 of 7
Windows Thread, ISA Server 2004 Advice with Websense in Technical; ...
  1. #1

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    16,216
    Thank Post
    893
    Thanked 1,773 Times in 1,529 Posts
    Blog Entries
    12
    Rep Power
    461

    ISA Server 2004 Advice with Websense

    I have now setup wensense, and it all seems to be running fine Just one question how do I force all the clients including computers that do not belong to the school through the proxy server.
    I have been googling it and someone suggested changing the default gateway IP address in DHCP to the IP address of the proxy server (in this case 172.24.32.3). The current default gateway we have is 172.24.35.254. I have tested this on a machine with a static IP I donít appear to have any connection to the internet. My thoughts are that our ISA uses port 8080 and the port for the world wide web is 80. So if I configured ISA to listen on port 80 would that work?

    Or would you suggest something else?

    I would appreciate your help & advice.

    Many Thanks

  2. #2

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,812
    Thank Post
    110
    Thanked 585 Times in 506 Posts
    Blog Entries
    1
    Rep Power
    224
    I'm going to miss out some of the more advanced settings of my configuration as there's no need to confuse the issue further. But basically, the way I do it he is a combination of firewall rules and GPO settings.

    On the network border firewall, I allow the internal proxy server access to the LEAs proxy IP/Port. I disallow anything else from accessing it. I also disallow direct access out via the usual ports (HTTP,HTTPS,FTP, etc).

    I then configure IE's branding policy to set the proxy to be the internal one.

    So in theory, IE is set to use the internal proxy by default. If some clever kid manages to override this, the firewall stops them from bypassing it.

    In reality, there are more complex settings involved, but for a basic overview, that's how it works.

  3. #3

    Join Date
    Nov 2006
    Location
    Reading, UK
    Posts
    487
    Thank Post
    30
    Thanked 14 Times in 8 Posts
    Rep Power
    19
    I prefer to use WPAD to automatically specify the proxy. Googling WPAD I'm sure will return some help with setting this up.

  4. #4

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    16,216
    Thank Post
    893
    Thanked 1,773 Times in 1,529 Posts
    Blog Entries
    12
    Rep Power
    461
    Ok so if the firewall is configured to only let the proxy server through the default gateway that should work? or am i wrong? (i think i am)

    What if a user logs on from another part of the forest and there proxy server is not defined becuase they use the LEA proxy?

    Cheers
    Last edited by FN-GM; 23rd January 2008 at 11:26 PM.

  5. #5

    Join Date
    Nov 2007
    Posts
    19
    Thank Post
    1
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Quote Originally Posted by FN-Greatermanchester View Post
    I have now setup wensense, and it all seems to be running fine Just one question how do I force all the clients including computers that do not belong to the school through the proxy server.
    I have been googling it and someone suggested changing the default gateway IP address in DHCP to the IP address of the proxy server (in this case 172.24.32.3). The current default gateway we have is 172.24.35.254. I have tested this on a machine with a static IP I donít appear to have any connection to the internet. My thoughts are that our ISA uses port 8080 and the port for the world wide web is 80. So if I configured ISA to listen on port 80 would that work?

    Or would you suggest something else?

    I would appreciate your help & advice.

    Many Thanks
    Did you ever find a solution to this?

    I'm in the same boat... All internet traffic goes through the ISA server, but I need to make sure non-domain laptops are filtered through Websense, because at the moment they're not.

  6. #6
    ahuxham's Avatar
    Join Date
    Apr 2008
    Posts
    1,122
    Thank Post
    76
    Thanked 138 Times in 109 Posts
    Rep Power
    31
    DHCP

    SCOPE [IP]
    > SCOPE OPTIONS
    > OPTION 003 (ROUTER)

  7. #7

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    16,216
    Thank Post
    893
    Thanked 1,773 Times in 1,529 Posts
    Blog Entries
    12
    Rep Power
    461
    Yep that is correct

SHARE:
+ Post New Thread

Similar Threads

  1. ISA Server 2004 Authentication
    By mrforgetful in forum Windows
    Replies: 6
    Last Post: 16th October 2007, 08:01 AM
  2. ISA 2004 Publish Web Server Problem
    By Nij.UK in forum Windows
    Replies: 7
    Last Post: 30th November 2006, 09:48 AM
  3. ISA Server 2004 Service Pack 2
    By spc-rocket in forum Wireless Networks
    Replies: 1
    Last Post: 7th February 2006, 10:05 AM
  4. ISA Server 2004 and RADIUS
    By spc-rocket in forum Wireless Networks
    Replies: 0
    Last Post: 11th December 2005, 12:48 PM
  5. ISA Server 2004
    By krb548 in forum How do you do....it?
    Replies: 15
    Last Post: 25th July 2005, 12:05 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •