Solved

Add exemption to external site isa 2000

Posted on 2006-11-26
6
216 Views
Last Modified: 2010-04-08
I want to add a exemption to a external site in isa 2000.

So far i have created a Destination set for the external address.
Then i have created a access policy calling that destination set and applying it to the relevant group
anything else i should do? as this does not seem to have worked.
0
Comment
Question by:GRV001
6 Comments
 

Expert Comment

by:Knuppie
ID: 18018335
Can you please more information?
Which protocols, where to? Do you get an error message
0
 
LVL 1

Author Comment

by:GRV001
ID: 18022581
http
to a external site, don't get errors but the site slows down and becomes unusable through the proxy. Avoiding the proxy runs smoothly

in event log on the proxy get this error pop up but it appears for many sites and they still work

"The ISA Server services cannot create a packet filter 203.166.110.169. This event occurs when there is a conflict between the Local Address Table (LAT) configuration and the Windows 2000 routing table. Check the routing table and the LAT to find the source of the conflict."
0
 
LVL 51

Expert Comment

by:Keith Alabaster
ID: 18040470
open the configuration tab and review the local address table. Make sure it ONLY contains addresses that are accessable by going out from the ISA server through  the INTERNAL nic. Anything that is accessible by going out of the ISA server through the external nic MUST NOT be listed here.

The fact it seems to work is incorrect, it will be causing delays and errors to your traffic and operations. Lets get this right, then we can look at your policies.
0
 
LVL 1

Author Comment

by:GRV001
ID: 18049569
We only have one nic on the isa server, the server may have originally been set up with two nics i not sure i only been here less then a month.

The reason for adding in the exemptions is that ISA 2000 does not liike Java from Sun

I just decided to add the exemptions into IE and then allow access to the external ip on the Firewall
0
 
LVL 1

Accepted Solution

by:
Computer101 earned 0 total points
ID: 18199854
PAQed with points refunded (300)

Computer101
EE Admin
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Wikipedia defines 'Script Kiddies' in this informal way: "In hacker culture, a script kiddie, occasionally script bunny, skiddie, script kitty, script-running juvenile (SRJ), or similar, is a derogatory term used to describe those who use scripts or…
Do you have a windows based Checkpoint SmartCenter for centralized Checkpoint management?  Have you ever backed up the firewall policy residing on the SmartCenter?  If you have then you know the hassles of connecting to the server, doing an upgrade_…
This Micro Tutorial demonstrates using Microsoft Excel pivot tables, how to reverse engineer competitors' marketing strategies through backlinks.
Although Jacob Bernoulli (1654-1705) has been credited as the creator of "Binomial Distribution Table", Gottfried Leibniz (1646-1716) did his dissertation on the subject in 1666; Leibniz you may recall is the co-inventor of "Calculus" and beat Isaac…

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question