I have a problem with setting up ISA 2004 on Windows SBS 2003. The problem is after setting up the deny and access rules: I added the group of users that I wanted to deny. It works but for everyone rather than the target user group. Hence, on checking monitoring I have found out that there is no client username: although I did tick the option of authenticate users. From the forums I learned that ISA client needs to be setup for the rules to work and users get properly authenticated. I finally installed ISA client and configured it, again the same thing.
What I have also figured out is that the traffic first gets sent to the DNS server and then to the desitnation ip. Is there something I am missing now, I have run out of ideas ps: DNS and ISA are same ip address.