Link to home
Start Free TrialLog in
Avatar of technolutions
technolutionsFlag for South Africa

asked on

Installing ISA 2004 Firewall Client via Group Policy

Let's start off by saying that I have never done this but I wanted to publish (if thats the right word) the Firewall client to all the client computers. I configured Automatic Discovery without any problems. Tested it and it's working perfectly. I found microsoft KB 838122 and did exactly as it says to deploy it via group policy. Problem is, as soon as I enforced that GPO and a user restarted her machine it kept asking her for her windows credentials. All of the clients are local admins and this shouldn't be a problem but I couldn't imagine why this would happen? Am I missing something here? I made a dedicated GPO which doesn't contain any other settings so I doubt that it could be the GPO. Btw, my client is running SBS premium.
Avatar of cjpalmer
cjpalmer
Flag of United States of America image

What features are you hoping to get from the firewall client? As a general rule, I don't install the firewall client except on an exception basis. If someone needs access that is not handled by the Proxy services, then I install the firewall client and configure it accordingly. In a small business scenario, you might have a few exceptions, but most users don't need the firewall client at all. Just the proxy settings enabled in IE.

You might be getting prompted for authentication because of the configured rules as well. If you don't allow the protocols that you are trying to use through the firewall and that is causing the authentication prompt asking for a set of credentials that has rights in the firewall to do this.

Charles
Avatar of technolutions

ASKER

Well, as far as I understand it, ISA firewall client secures the connection between the client computer and the server. I'm trying to harden the network locally as well. Isn't this best practice?
SOLUTION
Avatar of dnudelman
dnudelman
Flag of Spain image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Just for the sake of understanding - What is the real difference of installing ISA firewall client? I mean what does the firewall client do then?
ASKER CERTIFIED SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Thats a very valid point you have there. Most things happen over SSL yes so I doubt that I have anything to worry about. The only thing that I really had in mind was to harden my network but I get what your saying along the lines of speed and functionality vs. security. Thanks so much for the great explanation.