Room Filtering in ISA 2006

[jamiesev]

I have been using ISA 2006 as our web proxy for a few months now via a single nic config.

I have filtering setup for differnt ou's (staff and students etc). I have setup computer sets in ISA with the thought of making up a rule to disable the internet to that room via a shcedule for a set period of tiime. Sadly I cannot get the rule to work so after two days of head scratching I thought I would ask to see if anyone on here has managed to get a rule like this to work, and if so how! Thanks!!!

[FN-GM]

Well i think it might be because when you added your machine names into ISA they picked up an IP address. Since then DHCP has give them a new address.

 

Try it with a machine on a static IP

[jamiesev]

I have checked all of the IPs and they are the same as when I setup the computer set in ISA. I have also tried a static IP as the same thought went through my head! I have also installed the old 2004 ISA client on the machines but to no avail

[FN-GM]

You wont need the ISA client.

 

Have you tried putting the rule to the top of the list?

[jamiesev]

sadly I have yes, also restarted the server and MSfirewall service just incase the rule wasn't applying

[FN-GM]

have you tired the traffic simulator or the trouble shooting tools

[jamiesev]

yes they all seem to check out ok. I tried logging against one of the IPs and the rule never shows up so somewhere along the line ISA is disregarding it.........

[browolf]

I have a rule like that just above "last default rule".

it's properties are:

action:allow,

protocols: http/https,

from: {room sets}

to : external

condition: all authenticated users, all users

 

the point of the rule is that internet is allowed on room sets added to this rule, if not added the users end up at the last default deny rule.

[bio]

Personally i would not use this kind of setup. You hjave configured one nic into that box. So it is an proxy only box. I would setup a second nic and use firewall capabilities to configure those extra rules.

 

bio..