Hi Experts,
I am very new to ISA 2004 and to ISA in general. We just upgraded to from SBS standard to SBS premium, we did it mainly for the sql server, but it also comes with ISA 2004 so we are going to start using it for web control.
So far this is what I have accomplished:
ISA is set up in single network adapter mode, my internal network is 10.10.0.X, so I have my internal network defined in isa as 10.10.0.0 to 10.10.0.255. I then set up a group policy that forces IE to use the ISA server as a web proxy. At that point I was seeing clients in the web proxy logging but everyone was showing up as anonymous. So then I went in the properties of the local network in ISA and clicked the web proxy tab, then authentication, and ticked the box to require authentication. Then usernames magically started showing up in the logs using windows integrated authentication.
Now my problem is this is small buisness server, so we also have an internal web site running and outlook web access. We would like some upper level management to not run through the proxy, but for some reason they get blocked from internal websites then. They get a 403 error saying ISA has blocked the URL. In the log in ISA I see the denied http request, but there is no rule associated with the deny, and of course the username is anonymous.
I tried modifying my local network to exclude the server, but then I can't browse the web from the server. So is there anyway to force this authentication but still allow anonymous requests to the server? If you need any more explanation please ask, I tried to explain this the best I could.
Start Free Trial
