The tag has no wiki summary.

learn more… | top users | synonyms

7
votes
5answers
13k views

Will a reverse proxy in front of web server improve security?

Third-party security professional is recommending we run a reverse proxy in front of the web server (all hosted in the DMZ) as a best practice security measure. I know this is a typical recommended ...
4
votes
1answer
571 views

LAN segregation for security reasons using VLAN

I was asked to segregate the testing environment in our network to improve our security. Our structure includes: 1 switch Dell Power Connect 3448 1 switch Dell Power Connect 2748 A few 5 ports Star ...
4
votes
1answer
871 views

AuthResend query string being appended to URL

One of our clients is having an issue where POSTBACK seems to be broken when they connect to our Sharepoint application. When they navigate to a URL, an erroneous query string gets appended to the ...
3
votes
6answers
2k views

How to find a client generating traffic?

We're running SBS 2003 SP2 and I'm wondering if there's any easy way to find out were traffic during specific time is generated from? In my case, the overall traffic consumption per day is roughly ...
3
votes
5answers
561 views

Firewall Considerations While Migrating from SBS 2003 to SBS 2008

I'm currently running a Windows SBS 2003 with ISA 2000 and will be migrating to a new server containing Windows SBS 2008, Standard Edition. Since SBS 2008's internal firewall should not be seen as ...
3
votes
0answers
98 views

ISA wrong translation of the schema URL included in WSDL

I have a WSDL behind ISA server. The WSDL includes a schema <xsd:include schemaLocation="myschema.xsd"/> However, when accessed through ISA, some implicit mapping changes the server name to the ...
3
votes
3answers
377 views

ISA 2000 and COD MW2 Steam [closed]

OK, so maybe not the "proper use" of network resources, but we enjoy the odd COD game during lunch hours. When we played COD4, we had a dedicated server setup at the back of the server room. With MW2, ...
2
votes
4answers
12k views

How to block SKYPE when it's using port 80 & 443?

How to block SKYPE when it's using port 80 & 443 in a network. ( better if I can do it by using ISA 2006 and without disabling web) I know if users can't install skype they wont be able to use it. ...
2
votes
3answers
238 views

network topology including many services

I know this is yet another question on how to setup network but I hope you are not bored of such questions yet. The site is also an office, so it includes windows dc, windows ad, exchange, sql, file ...
2
votes
3answers
519 views

How to send authentication credentials to a published web site without prepending the AD domain name?

ISA Server 2006 publishing a web site; ISA does forms-based authentication against an Active Directory domain (which ISA itself is joined to), then, if the user is authorized, ISA sends the user's ...
2
votes
3answers
929 views

Can arbitrary email addresses be stored in AD userPrincipalName?

I have a web app that is front-ended by ISA, natively authenticating against AD. All users currently log on with sAMAccountName. I would like to allow users to provide a personal email address and be ...
2
votes
2answers
2k views

TMG/ISA FWX_E_NETWORK_RULES_DENIED

I've got three disparit networks that all terminate at a TMG machine. I am trying to communicate between two of these networks, but the TMG firewall keeps dropping the connection as ...
2
votes
4answers
21k views

Cannot get proxy.pac file to get browsers to go DIRECT for localhost

I am gonna throw this problem out into the wild. We have just started using a proxy to log users internet usage against login names. This is setup on ISA Server 2004 (which is on our Internet gateway ...
2
votes
2answers
805 views

ISA 2006 does not allow traffic using FQDN

I experience an issue accessing Tomcat running over SSL with MS ISA 2006 in front. When I access using the internal IP address (e.g. https://10.0.42.136/...) everything works fine and ...
2
votes
3answers
2k views

Are there other application layer firewalls like Microsoft TMG (ISA) that do advanced http rules?

Since the old days, ISA and now TMG have had several great features that I often want to deploy to my customers because of the enhanced functionality and security, but often the cost of an additinal ...
2
votes
1answer
4k views

reverse proxy setup in ISA Server

I am new to ISA server and here is my requirements, and I want to use ISA server to setup reverse proxy to achieve my requirements. I have two questions, Whether ISA server could serve my needs? ...
2
votes
1answer
2k views

IP address conflict with MAC address 00:00:00:00:00:00

One of our Windows 2003 R2 ISA firewall servers recently had a 1-hour spell of intermittent connectivity to our Internet WAN connection, which was fixed after disabling then re-enabling the network ...
2
votes
1answer
1k views

ISA Proxy - HTTPS Traffic

We have an ISA 2006 setup for our organisations proxy. It's been working well for the last few months just blocking everything except a few allowed web site and web applications. We need to allow ...
2
votes
1answer
6k views

Users loggin to 3Com switches authenticated by radius not getting admin priv and no access available with radius service down

Following the setup that I have for my Cisco devices, I got some basic level of functionality authenticating users that loggin to 3Com switches authenticated against a RADIUS server. Problem is that I ...
2
votes
1answer
919 views

Active Directory Group members of ISA Server 2006 user set not working on rule

When I add a global security group in Active Directory to a user set on ISA Server 2006, the rule using that user set does not take effect for members of the AD group. If I add a single user to the ...
2
votes
2answers
56 views

How secure is ISA Server 2000

We have a small office using ISA Server 2000, previously this was connected to the internet through another firewall provided by the business park we are at, but soon will be connected directly to the ...
2
votes
1answer
666 views

VPN with NAT-T between OpenBSD and Microsoft ISA

A customer of ours is setting up an ISA-Cluster in private network address range and we have to build a VPN connection with them. There is no way avoiding NAT-T and this is where we get to a problem: ...
2
votes
1answer
5k views

Can't get past “pending Phase 2” on OpenSWAN <-> ISA Server IPSec VPN

The issue I´m having quite a hard time configuring OpenSWAN on my Linux server (Ubuntu 12.04) to connect to an ISA Server 2004 IPSec VPN. There is apparently something wrong in the configuration that ...
2
votes
1answer
117 views

Using ISA to serve multiple servers as one domain

We use the www sub-domain to serve html, css, etc for our site. We also have a www1 sub-domain that routes traffic to our application server. So right now, ISA routes www traffic to ServerA and www1 ...
2
votes
0answers
215 views

ISA Server published Exchange 2007 CAS Web farm - uneven load on servers

We use ISA 2006 to publish two Exchange 2007 CAS Servers. Both CAS Servers have identical hardware spec, and ISA Server connectivity verifiers report the same respons time from the servers. The ...
1
vote
7answers
3k views

Ubuntu 10.04 running in VMWare unable to connect to authenticate through ISA Server

I have a copy of Ubuntu 10.04 [Desktop] LTS running inside a virtual machine using VMWare workstation on a Win 7 host sitting behind an ISA Server on a corparte network. I am unable to connect to the ...
1
vote
2answers
3k views

renewed Thawte SSL Web certificate on ISA 2006 - This certificate cannot be verified up to a trusted certification authority

We have recently renewed a Thawte SSL Web Server Certificate. After installing on the Web Server (Windows Server 2003), the certificate works fine if I publish directly to the server through ISA 2006. ...
1
vote
2answers
339 views

Recommended hardware for Microsoft ISA Server standard?

The scenario is a small company with a few hundred users. ISA Server 2006 (at time of writing) will be implemented primarily to restrict websurfing and various applications like instant messaging per ...
1
vote
2answers
558 views

Help to review ISA Server 2006 web publish settings

I have a internal site named myinternalsite, and I want to publish all information in the internal site to my external internet domain http://www.myexternalsite.com and under order path, i.e. when ...
1
vote
2answers
985 views

Publishing multiple web servers with reverse proxy on localhost, retaining original client IP and hostname

I have been using ISA on Windows Server 2003 to publish multiple web servers hosted on the same machine. Setup as follows: ISA HTTP/S listener bound to 127.0.0.1 + external IP IIS bound to 127.0.0.2 ...
1
vote
2answers
1k views

Is there a way to make SQL Browser service work behind ISA firewall? What would be the proper config if there is?

I have an issue with ISA Server and SQL Server... In SQL Server Management Studio there can be done a query for server instances to network servers. This is done by broadcasting to SQL Browser ...
1
vote
2answers
2k views

ISA 2006 SP1 - SSL Client Certificate Authentication in Workgroup Environment

We have an IIS6 website that was previously published using an ISA 2006 SP1 standard server publishing rule. In IIS we had required a client certificate be provided before the website could be ...
1
vote
1answer
920 views

ISP Load Balancing with ISA 2006

I understand that ISA 2006 has an integrated Network Load Balancing feature. We also recently acquired a second internet line through a second service provider. I know it is possible to purchase a ...
1
vote
2answers
2k views

ISA Server for x64 systems? Or recommend other Firewall/Routing/VPN software

we're a website that is going to have two servers behind the Firewall/Router Server (a web server and a database server). All three servers are going to be running Windows Server 2008 R2 x64. Excuse ...
1
vote
1answer
60 views

Track messenger messages in ISA server?

As all of my internet traffic goes through an ISA server, is it possible to extract the content of IM messages from the logs? It's ISA 2004 running on 2K3 Server. Thanks in advance.
1
vote
2answers
851 views

How to install magento extensions from behind an ISA Server?

I am trying to install some Magento extensions however it keeps timing out. When I run a trace through ISA Server 2004 I can't see any denied traffic. The only thing I do get is a http proxy closed ...
1
vote
1answer
1k views

ISA 2006 switch to kerberos causes authentication problems for some users

In our large corporate environment we have 4 ISA 2006 servers set up. The users (WinXP IE8) are configured with an automatic proxy configuration script. Recently, the PAC was modified to return FQDN ...
1
vote
1answer
4k views

WDS DHCP same server on Windows Server 2008

I have been struggling with a problem on my Windows Server 2008 for the past 4 - 5 hours and cannot figure out whats wrong. I have tried pretty much everything that I found on google and all the links ...
1
vote
2answers
243 views

Dedicated Server, Multiple VMs on the back, HyperV Up Front… Where do i put TMG?

As a follow up question to How Do i host multiple servers on HyperV with only a few public IP Addresses I am now trying to figure out where to put the ISA/TMG Server? Should it be virtualized, ...
1
vote
2answers
1k views

Forefront 0xc0040017

I recently began to receive a huge (600 thousand to 2 million per day) number of FWX_E_TCP_NOT_SYN_PACKET_DROPPED, 0xc0040017 entries in my Forefront TMG logs. If the top 3 source IPs are any ...
1
vote
1answer
302 views

ISA 2006 - Can it route HTTP traffic to both standard and non-standard ports on the same physical server?

I am working with an administrator at my company. We recently added MS ISA 2006. I do not have access to the server, so my question is more theory based. Is it possible to setup ISA to route HTTP ...
1
vote
1answer
389 views

Threat Management Gateway can't access share on NAS

My network looks like this: DC - SERVER01 - Windows Server 2008 SBS TMG - TMG01 - Windows Server R2 Standard NAS - DATASTORE - Cisco NSS6000 All machines and devices are joined to the ...
1
vote
2answers
1k views

Convert ISA 2006 MSDE logs to text format?

We have a client running ISA2006 with logs going to MSDE. The MSDE database gets rotated. We have NO control over the client infrastructure. We need to get the logs out to a TEXT file on the server ...
1
vote
1answer
1k views

Redundancy and Automated failover using Forefront TMG 2010 Standard between Production-DR site?

I'm using MS TMG 2010 Standard as my single firewall to publish my Exchange Server and IIS website to the internet, however it is just one VM in the DMZ network with just one network card (vNIC), what ...
1
vote
1answer
2k views

ISA Server 2006 SP1 :: Allow unauthenticated users (non domain users) access to external (internet)

Now that we have applied an internal to external rule blocking all users access to the internet, other than those users in a whitelist, we have the obvious issue of non authenticated users, not on our ...
1
vote
2answers
3k views

IIS not listening on port 80

We have server 2003 and ISA 2004 with IIS 6 on same machnie. Everything worked well till yesterday, when we try to make some new rule in ISA..but this is a long story... Unfortunatelly something ...
1
vote
1answer
2k views

Client VPN works, but only from certain locations (ISA/TMG)

I've done something very simple. Or so I thought... I have setup VPN client access in TMG (or ISA, they're pretty alike). I created a group called VPN in AD, added that as allowed VPN users in TMG, ...
1
vote
1answer
1k views

Kerberos passthrough with Microsoft ISA/TMG and SAP EP - Internet Explorer is confused if https

I've been struggling with this prob since a while and I start being desperate to find a solution. Here's my problem: I have setup a SAP Enterprise Portal which is published via Microsoft ISA. ISA is ...
1
vote
1answer
792 views

How do you configure SSO to SharePoint from an iPad?

I've been asked to look at implementing SSO from an iPad to a SharePoint 2007 installation. This could use ISA Server 2006 or any other product. Is this possible? If so how? I was thinking ...
1
vote
1answer
1k views

ISA Server Route Add Question

I have a situation where I have and ISA 2006 server (on Win2k3) that has an internal and an externaly facing NIC's. All works fine but I need to add a couple of routes for the following reason: Our ...