Advertisement

10.01.2008 at 08:47AM PDT, ID: 23778446
[x]
Attachment Details
[x]
The Solution Rating System

With so many solutions, how can you tell which solutions are most likely to help you and which ones are not? To provide you with a tool to use, we rate our solutions based on various elements that most accurately determine if a solution is a quality solution. To explain what factors affect the solution rating, here are the elements we take into consideration when formulating our solution rating.

  • The Grade of the Solution
  • The Zone Rank of the Expert Providing the Solution
  • The Number of Author and Expert Comments
  • The Number of Experts Contributing
  • The Feedback of the Community

Your Input Matters
Because of the way the system is set up, the most important variable in this equation is you. As a member of Experts Exchange, you are able to cast your vote on the quality of the solutions in regard to how complete, accurate, helpful and easy to understand each solution is. When you provide your feedback, each rating is adjusted accordingly. So, if you see a solution that has a poor rating that you think is a good solution, let us know by rating it. As you do, the rating will be adjusted and will become more accurate for other members of our site.

If you have any suggestions that you would like to make for our rating system, please ask a question in the Suggestions Zone of Community Support.

Thank you!
7.0

ISA 2006 3-leg configuration question

Asked by pdsavard in MS Forefront-ISA

Tags: , ,

HI, I try to configure correctly my 3-leg ISA server

first the network:
Nic1: Internal (10.0.1.51) No Default Gateway, Internal DNS
Nic2: External (66.X.X.X) DG: ISP gateway NO DNS
Nic3: Perimeter (10.0.5.1) No Default Gateway no dns (for now)

After switching to 3-leg template I change the Perimeter->External to NAT et and the Perimeter->Internal to Route.
I the Network tab of ISA I check that Internal see 10.0.1.0 to 10.0.1.255 and Perimeter see 10.0.5.0 to 10.0.5.255.

I add this range in the PING system policy for testing purpose.
I add this 2 testing access rule:
- Allow, PING from Internal, to Perimeter, All user  (name of the rule: Test2)
- Allow, PING from Perimeter, to Internal, All user  (name of the rule: Test)

Not Ping result from a computer IN the perimeter network:
- Ping the Perimter nic (10.0.5.1) : Ping OK
- Ping the Internal nic (10.0.1.51): Ping OK
- Ping another computer on the Internal network: Can't Ping

Same result of ping from a computer inside the Internal Network. I can ping all the ISA nic but not a host in the other network.

I monitor the ISA log when I do a PING:
Original Client IP: 10.0.1.45
Transport: ICMP
Client IP: 10.0.1.45
Destination IP: 10.0.5.44
Protocol:PING
Action: Initiated Connection
Rule: test2
Result Code: 0x0 ERROR_SUCCESS
Source Network: Internal
Destination Network: Perimeter
Log Record Type: Firewall

I forgot to mention that the Perimeter and Internal NIC have subnet mask set to 255.255.255.0, maybe is the point?
Any suggestion?
Thanks










Start Free Trial
[+][-]10.01.2008 at 10:20AM PDT, ID: 22616726

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 14-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]10.01.2008 at 01:24PM PDT, ID: 22618628

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 14-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]10.02.2008 at 04:00AM PDT, ID: 22622866

Assisted solutions are selected by the member who asked the question as a comment that contributed to their question's solution.

Start your 14-day free trial to view this Assisted Solution or ask the Experts your question.

 
[+][-]10.02.2008 at 05:01AM PDT, ID: 22623266

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 14-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]10.02.2008 at 11:02AM PDT, ID: 22626812

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 14-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]10.02.2008 at 12:23PM PDT, ID: 22627572

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 14-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]10.02.2008 at 02:04PM PDT, ID: 22628603

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 14-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]10.08.2008 at 12:25PM PDT, ID: 22672281

View this solution now by starting your 14-day free trial. Setting up your free trial is quick, easy, and secure. We will return you to this solution, unlocked, when you're done.

 

About this solution

Zone: MS Forefront-ISA
Tags: Micsoroft, Internet and Acceleration Server, 2006 SP1
Sign Up Now!
Solution Provided By: pdsavard
Participating Experts: 1
Solution Grade: A
 
 
[+][-]10.08.2008 at 12:29PM PDT, ID: 22672333

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 14-day free trial to view this Author Comment or ask the Experts your question.

 
 
Loading Advertisement...
20081112-EE-VQP-43 / EE_QW_2_20070628