Sonicwall CSM3200 & ISA 2006

[kamikaze]

I need to get this working by Wednesday next week (26th August). I have been forced to remove our outdated GFI Webmonitor as it was causing problems & now have an unprotected network. Our students come back on the 26th.

 

I have tried this before but come up against a brick wall. I will have the network plugged into x0 then x1 will be plugged into the ISA 2006 server which is then plugged into the router. - Does this all sound correct so far?

 

In my previous attempts I have managed top get the AD connector configured & talking to the CSM but was unable to apply any of the policies as all users wee listed as default user regardless of what I tried. I even had Sonicwall support connected remotely for a week trying to sort it - but they had no luck!!

 

I think the issue might be caused by the fact that the ISA Server needs to be the default gateway (or does it??) & it's stopping traffic somewhere. I tried running without the ISA server just a firewall & it was fine with a couple of users logged in but when I had 300 logged in the network ground to a halt!

 

Any ideas or suggestions would be gratefully received!

 

Thanks

Mike Taylor

Network Engineer

St Leonards School

[FN-GM]

Have i missed something but what are you trying to do?

[kamikaze]

Control the sites our students & staff have access to. The CSM is a great device for this just need to get it to work with our setup.

 

Mike

[FN-GM]

Ah filtering.

 

I wouldn't use sonicwall for filter., we use it but have moved over to Websense as it is useless. We now use it as well as Websense.

[smadison]

Have you set-up mirrored groups on your sonicwall? if not set them up and look at your gpo settings for the proxy server. Have you looked at the SonicWALL ADConnector?

[kamikaze]

Mirror groups? - I'll have a go in the morning. What exactly should I be looking fro GPO wise? All works fine except that I cannot apply policies. The AD-Connector seems ok. I can assign policies etc.....

 

Mike

[tom_newton]

Sounds a bit of a... different? .. setup - can you grab paint and do us a crudely-drawn network diagram?

 

The Sonic will generally want to be at the gateway i'd have thought.

[SYNACK]

From the sounds of your setup the ISA box does not need to be the default gateway of your clients, point them at the Sonicwall and then point the Sonicwall at the ISA server assuming that the Sonic wall is inside your network closer to the clients and the ISA is sitting at the edge.

[kamikaze]

Sounds like that might be it. I'll give it a go this morning & let you know. Thanks for your help.

 

Mike