krb548 Posted July 21, 2005 Posted July 21, 2005 I have install ISA Server 2004 onto a Windows 2003 server. I have been following Microsoft's help guides but I have failed to make the server talk with the LEA's proxy server. Does anyone have any suggestions as to what I am doing wrong? Any help would be appreciated, the old ISA server 2000 was eaiser to set up!
Ric_ Posted July 21, 2005 Posted July 21, 2005 May me doing this today or tomorrow so will post any oddities that I notice
mrtechsystems Posted July 21, 2005 Posted July 21, 2005 I have you enter the proxy.core address in the upstream proxy
krb548 Posted July 21, 2005 Author Posted July 21, 2005 I have now managed to get it to go on the web, not sure what I did but at the moment it is working. I have not applied any restrictions yet, I have that fun still to come.
krb548 Posted July 21, 2005 Author Posted July 21, 2005 I spoke too soon. I installed the service pack and now it won't see the upstream server. Back to square one!
mozzy Posted July 21, 2005 Posted July 21, 2005 ISA Server 2004 and Windows Server 2003 SP1 do not go well together. So ironically you should run ISA on a standard Windows 2003 box. In terms of how to make the ISA use the county proxy, you need to go to Configuration | Networks. Select the web chaining tab and create a new web chaining rule. Give it a name; set the destination as External (under networks); Next choose to redirect requests to a specified upstream server (delegate credentials if you want - I do); fill in the server details and a logon if you need to; and then set to Retrieve requests directly from the specified destination when the primary route is unavailable. I've not had any success when "Automatically polling the upstream server" as ISA appears to flood the server with requests, which sometimes means ISA turns itself off from the web so I don't use that one. Another issue you may have regarding ISA not always connecting is that the External network connection must be connected before the ISA service (Microsoft Firewall) starts. If it becomes disconnected I have found the ISA service can disallow traffic to that card and a service restart is required.
tarquel Posted July 21, 2005 Posted July 21, 2005 Small point but if you have a problem with a MS Service Pack, you can call for free support on the situation. I dont know whether this is only relevent for OS SP's - XP, 2003, etc... and not Application Server SP's - but as you're on about Server 2003 SP1, you should call MS, explain the situation, and ask for support on it. They should give u it for free Cheers guys Nath
mozzy Posted July 21, 2005 Posted July 21, 2005 Yeah true but the trouble is it's a known issue, as in MS know about it - just can't/won't fix it yet - so the advice is to keep the firewall patched but not service packed.
tarquel Posted July 21, 2005 Posted July 21, 2005 gotcha - cool [u never said MS knew about it or i wouldn't have mentioned it ] Welcome to the forum Nath
mozzy Posted July 21, 2005 Posted July 21, 2005 noted, and thanks. Just reading through the lists now I have some spare time ... a rare commodity in the IT world of Education as i'm sure we all know. That said, if anyone has any ISA 2004 questions shout out, i've spent a little while digging through it and have a pretty tight ship going now.
krb548 Posted July 22, 2005 Author Posted July 22, 2005 I managed to get the ISA Server talking to the web last night before I went home. Came back in this morning and it had stopped talking to the upstream server again. So I got totally pigged off with it and uninstalled it and started again. I now have ISA up and running without service pack 1. I am now in 2 minds whether to re-apply the service pack or not. Not sure what to do, may just do it and see what happens, if it fails again I can re-install it again. This time I have also told ISA to create backups of the configuration files so I could re-load them at a later date if needed.
mrtechsystems Posted July 22, 2005 Posted July 22, 2005 Sounds a daft question but has your LEA ISP been down in the last couple of days
Ric_ Posted July 22, 2005 Posted July 22, 2005 Keith, tell CLEO that you are having problems and they may open up the ICMP on your router - thus allowing you to ping the upstream proxy for testing purposes. It may be that your connection has been dropping out.
Ric_ Posted July 25, 2005 Posted July 25, 2005 @Keith Just finished the install of ISA 2004 with SP1 on a Windows Server 2003 Std box with SP1 installed. At the moment I have only 2 rules, one for allow all web access (HTTP & HTTPS) plus one for deny all. Since I am posting from one of my clients, it seems to be working OK If you are still having probs, PM me your number and I will give you a bell!
zippy Posted July 25, 2005 Posted July 25, 2005 All you ever wanted to know about ISA Server: ISA Server And All About It
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now