ISA Help

[DSapseid]

Hi,

Im having a right day of it today and im having a mental blank

I have just set up a second ISA server here as a temporary measure so i can rebuild my main isa server. I have got ISA 2004 all installed fine, the clients can connect to the isa server but they wont connect to the internet and this is because i havent put in countys proxy address anywhere yet and i cant remember where i need to put it!

If some nice person could tell me i would be most gratefull

Cheers

Dan

[ArchersIT]

You need to put it in the webchaning area.

Go to Configuration/Networks/Web Chaning. This will probably show you a default rule -right click and select properties. On the action tab select the radio button labelled "Redirecting them to a specified upstream server" and then set the settings as appropriate.

Hope this helps

Cheers

Jonathan

[DSapseid]

Thanks for that, i have put it in there but i still cant get internet access although i can send emails via this isa server I have checked all the firewall rules and with no success! I have even created a new one and told it all internal traffic to all external traffic for me allow and disabeled all the other rules to see if one was having a funny fit and still nothing!

The strange thing is that im not getting an isa error message just the standard ie cannot find page one!

Any ideas??

[ArchersIT]

I am sending you a PM - give me a ring and we will compare setups.

Jonathan

[timzim]

Try bypassing your LEA's proxy to check internet connectivity: turn off the 'redirect to upstream proxy rule' you've just created so the only rule working is the Default rule (retrieve request directly). If you can then access the internet you know the problem is with the upstream proxy rule or with the upstream proxy itself.

[ArchersIT]

I have had a chat with DSapseid and unfortunately all his settings look fine. We did find the following:
1. Pop3 and other ports going through fine
2. Web browsing from the ISA box works fine
3. Web browsing from his local machine does not work and does not report any traffic into the logging tab on ISA (the pop3 traffic does).

We have tried double checking the proxy connection settings on his local browser but these all seem fine.

At the moment (as it is a replacment box) he is planning to re-install ISA back to default (he had imported all the rules etc from his other box) but if anyone else has any ideas I am sure they would be gratefully received.

Jonathan

[DSapseid]

Right ISA reinstalled and the same thing im about to through the thing out the skylight!!!!

On a more serious note, i have only added one rule on the server which is to allow all users all outbound to external from internal which should work!! But i just get the damn page cannot be displayed message

[timzim]

Before re-installing have you tried turning all the rules off. There should be a disabled Default rule, which you should enable and move to the top of the list, allowing all access. Otherwise make one allowing All Users access, from Internal to External, all protocols, all the time. If you can't access webpages via this then you know the rules weren't to blame.

Best to try eliminating all possible causes first before throwing the baby out the window!

[ArchersIT]

The ISA setup has a test rule of allow all from internal to external for all ports for all users. This is working fine for all ports except web browsing. When monitoring you can see the traffic for those other ports but there is no success or failure messages when trying to web browse through it.

My personal hunch with those symptoms eas that the configuration of the web browser was not even directing it at the ISA server - but when we checked this there did not seem to be any problems.

All thoughts welcome!

Jonathan

[krisd32]

Can you screen shot all your settings?
What template for the firewall have you got it set as?
Not something simple like a schedule is it?

[timzim]

Does your new ISA have the same name as the old or different? Also is it a domain member?