ISA 2004 and Sims.net Help

[woodham]

ISA 2004

 

Can anybody help me with Sims.net and ISA 2004?

 

The setup we have is Sims.net on 2003 server accessing the outside world via ISA 2004 (on 2003 server) The Sims box has the ISA client on it. And we have checked the Keys and passwords with the LEA.

 

The problem I’ve got is that when Sims tries to dial home (LEA) on a scheduled task it first tries to authenticate using GET which is anonymous and the ISA box denies anonymous connections.

 

Things I’ve tried.

 

Setting the Proxy settings in Sims (tried Sims manager, domain admin, and local admin.)

 

Removing the proxy settings.

 

Leaving Sims logged in on the server and just disconnecting my session.

 

I’ve tried creating rules in ISA to allow all outgoing from the Sims Box

 

Isa rules to allow (as a tempory measure) all traffic both from and too the Sims Box.

 

The only thing I’ve found that works is to allow anonymous authentication on the internal network which is a bit annoying as I like to know who’ connecting to what and where.

 

So can anybody help me get the scheduled tasks to work through ISA Without having to have anonymous access enabled?

 

Thanks

 

Andy

[SYNACK]

If your sims machine has a static IP I would suggest adding a rule that allows http, https and ftp from the sims computer to the outside world. You can set the sims machine ip up as a computer name inside ISA to make it easily readable. Then you will want to remove the ISA client on the sims server, make sure that the default gateway is set to the isa server and the use a proxy option in Internet Explorer is disabled.

 

This configuration should allow only the ISA server to access the internet transparently through the ISA server while maintaining all security policies on the other machines in the network.

[woodham]

Thanks for the reply

 

I'll give it a try tonight when the network is quiet.

 

Andy

[woodham]

Just wanted to say thanks the solution you gave me worked a treat

 

Wonder why our local LEA support team didnt know this?

 

 

Andy