Solved

Configuring ISA server 2006 Standard Edition as a Tunnel behind a firwal

Posted on 2009-04-05
3
398 Views
Last Modified: 2013-11-16
Dear All,

I have a problem ,  I have a hardware firewall which is configured properly but it doesn't have traffic speed monitoring , so i decided to Configure and ISA server as tunnel to install third party software to see the Speed traffic consumption, I mean this isa server will be between the Client User and the hardware Firewall and the ISA server is for traffic monitoring only, but internet privileges will be given through the firewall hardware ( Ex: Users have full internet access , User Doesn't Have Internet Access at all ) .

I know to do that i have to enable routing not NAT protocol , so firewall can recognize the user ip and give him the privilege which had been assigned to his IP .

Al though i had Enabled that .. but still the isa server is using Securenate and http requests appears to the hardware firewall as from ISA server which off course have full rights to internet Access..

I need to Enable Complete routing which make the users requests appears from his IP ( All his requests ) . .. but unfortunately i couldn't.

Can anybody help me with this??


Regards
Mohamed Hadoka
0
Comment
Question by:hadoka
  • 2
3 Comments
 
LVL 5

Expert Comment

by:theoaks
ID: 24086838
To disable SecureNAT, you must disable the predefined HTTP protocol from the Web proxy filter.

this will mean that application layer filtering will no longer apply, so you wouldnt be able to monitor any traffic.

affectively turning off securenat bypasses the webproxy.
0
 
LVL 5

Expert Comment

by:theoaks
ID: 24129492
response or points please
0
 

Accepted Solution

by:
hadoka earned 0 total points
ID: 24131179
You didn't answer my question ... I need to route the ips , which mean that i want the requests when its coming out the ISA server appears the IP of original pc request ..

Ex:

My Situation now :

PC ( 192.168.2.2 ) >>> ISA Server ( 192.168.2.1)>> HTTP Request (192.168.2.1)

I want this and i had seen it before but unforutnately i can get it :

PC ( 192.168.2.2 ) >>> ISA Server ( 192.168.2.1)>> HTTP Request (192.168.2.2)
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
GPO for weekly scan with Microsoft Security Essentials 1 66
Sonicwall NSA240 AppFlow 2 75
Which the best UTM recommended ? 2 69
Tagging ports on a managed switch 6 50
I found an issue or “bug” in the SonicOS platform (the firmware controlling SonicWALL security appliances) that has to do with renaming Default Service Objects, which then causes a portion of the system to become uncontrollable and unstable. BACK…
Imagine you have a shopping list of items you need to get at the grocery store. You have two options: A. Take one trip to the grocery store and get everything you need for the week, or B. Take multiple trips, buying an item at a time, to achieve t…
This Micro Tutorial will give you a basic overview how to record your screen with Microsoft Expression Encoder. This program is still free and open for the public to download. This will be demonstrated using Microsoft Expression Encoder 4.
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…

910 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now