Solved

ISA Proxy and Firewall Client

Posted on 2004-08-09
3
375 Views
Last Modified: 2013-11-16
I am new to ISA Server Standard and I have been reading a lot about it. I am a little confused about client access.

I am running ISA on a member server with nothing else on it. DHCP and DNS is on another box and Exchange is on a third box.

Regrinding Firewall client: What is the benefit of it? Do I need it? If so, would I have to run around to install on 80 users?

Regarding the proxy settings in IE: Is there a benefit to using a clients proxy settings verses the DHCP? Can I expect the same cache and reporting benefits if I want to use DHCP?

Thanks for any clarification.  
0
Comment
Question by:bizzie247
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 1

Accepted Solution

by:
acidious earned 125 total points
ID: 11776759
Hi Bizzie,

First off I would like to recommend a site that many people use to figure out common and not so common issues with the isa server. www.isaserver.org

Now on to your question.

If you are providing simple http web traffic access to your users then you do not need the firewall client you can just point the web browser proxy setting to the isa server. The web proxy client will handle the following application layer protocols:

Http
Https
Ftp
Gopher

For any other protocol you will either have to use the firewall client or set the computers up to be a secureNAT client.  Setting up Secure NAT does not require you to install anything on the client pc.

As for using DHCP to setup the proxy setting. I have done this and sometimes had delays finding the ISA SERVER, also if your DHCP server goes down then the client pc's will not be able to find the isa server.  If are running Active Directory then you can specify the internet explorer proxy settings in group policy. I have found this to work better than any of the other methods.


Hope this Helps,

Ryan
0
 

Author Comment

by:bizzie247
ID: 11777681
Thank you very much.

By the way, I have been to isaserver.org and while there IS a lot of information there, they did not answer the question in simple terms as you did. Most tech sites that I visit make assumtions that if you are there you have a certain understanding to begin with.

0
 
LVL 1

Expert Comment

by:acidious
ID: 11778380
No Problem! If you have any more questions let me know, ISA Server is a great program but it's also a pain in the ass sometimes. :)

Thanks,
0

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Wikipedia defines 'Script Kiddies' in this informal way: "In hacker culture, a script kiddie, occasionally script bunny, skiddie, script kitty, script-running juvenile (SRJ), or similar, is a derogatory term used to describe those who use scripts or…
If you are like regular user of computer nowadays, a good bet that your home computer is on right now, all exposed to world of Internet to be exploited by somebody you do not know and you never will. Internet security issues has been getting worse d…
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an antispam), the admini…

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question