Solved

ISA Firewall client blocks connection to SQL Server

Posted on 2006-06-27
5
440 Views
Last Modified: 2013-11-16
Dear Experts,

I lost myself serching for the cure to connect my internal user to SQL Server through ISA Firewall Client. I am using ISA 2000 on the server. The point is that user's machine has two NIC's. One has LAT address and the other one has other subnet address wher SQL resides. I can ping SQL server. I can browse shared folders on it. But I can not telnet port 1433. If I disable Firewall client, I can get SQL server (even port 1433). And my application is connected successfully. If I turn it back on I gives me error, saying SQL server is unavailable or access denied. I tried to set [appl_file_exe_name] Disable=0 so that Firewall does not deal with it at all. Still I get the same error. I tried to set [appl_file_exe_name] RemoteTcpPorts=1433. Still no success.

If you have any ideas, please share it
I appreciate your help very much.

Looking forward to hearing from you  
0
Comment
Question by:Terrible_macro
  • 2
5 Comments
 
LVL 51

Expert Comment

by:Keith Alabaster
ID: 16998632
The isa client is sending all traffic, web and socks, to the ISA server. If you check your isa logs you will see the deny errors listed in the fw log. Create a rule on ISA allowing internal to internal comms for the sql traffic.
0
 

Author Comment

by:Terrible_macro
ID: 16998875
Guys,

Thanks, but I have alredy found solution. The problem was with understanding LAT and ISA. The point is that ISA client checks IP queries with LAT, received from ISA server. If it does not find IP it routes request to ISA server. In my case, I did not put local SQL server subnet to LAT. When user opens application to receive data from SQL server it makes request to IP address from other subnet. ISA client looks for this IP in LAT. It can not find it there so it transfers it to ISA server. ISA server processes the request as external, but it can not find the IP address (because no routing is set on the server: host unreachable). Then ISA server returns to client "connection failed". I added SQL server subnet to ISA LAT so that requests to SQL server ip address avoid being sent to ISA server.

Again,
Sorry for bothering you guys.
Hope I can share my solution with other people.
0
 
LVL 51

Expert Comment

by:Keith Alabaster
ID: 17003806
It is a requirement for the LAT on the ISA to have ALL addresses that it (ISA server) can access through its internal interface.
0
 
LVL 1

Accepted Solution

by:
DarthMod earned 0 total points
ID: 17183020
PAQed with points refunded (250)

DarthMod
Community Support Moderator
0

Featured Post

Courses: Start Training Online With Pros, Today

Brush up on the basics or master the advanced techniques required to earn essential industry certifications, with Courses. Enroll in a course and start learning today. Training topics range from Android App Dev to the Xen Virtualization Platform.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The DROP (Spamhaus Don't Route Or Peer List) is a small list of IP address ranges that have been stolen or hijacked from their rightful owners. The DROP list is not a DNS based list.  It is designed to be downloaded as a file, with primary intention…
This article offers some helpful and general tips for safe browsing and online shopping. It offers simple and manageable procedures that help to ensure the safety of one's personal information and the security of any devices.
This tutorial gives a high-level tour of the interface of Marketo (a marketing automation tool to help businesses track and engage prospective customers and drive them to purchase). You will see the main areas including Marketing Activities, Design …
This video shows how to quickly and easily add an email signature for all users on Exchange 2016. The resulting signature is applied on a server level by Exchange Online. The email signature template has been downloaded from: www.mail-signatures…

776 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question