Solved

Configuring ISA server 2006 Standard Edition as a Tunnel behind a firwal

Posted on 2009-04-05
3
396 Views
Last Modified: 2013-11-16
Dear All,

I have a problem ,  I have a hardware firewall which is configured properly but it doesn't have traffic speed monitoring , so i decided to Configure and ISA server as tunnel to install third party software to see the Speed traffic consumption, I mean this isa server will be between the Client User and the hardware Firewall and the ISA server is for traffic monitoring only, but internet privileges will be given through the firewall hardware ( Ex: Users have full internet access , User Doesn't Have Internet Access at all ) .

I know to do that i have to enable routing not NAT protocol , so firewall can recognize the user ip and give him the privilege which had been assigned to his IP .

Al though i had Enabled that .. but still the isa server is using Securenate and http requests appears to the hardware firewall as from ISA server which off course have full rights to internet Access..

I need to Enable Complete routing which make the users requests appears from his IP ( All his requests ) . .. but unfortunately i couldn't.

Can anybody help me with this??


Regards
Mohamed Hadoka
0
Comment
Question by:hadoka
  • 2
3 Comments
 
LVL 5

Expert Comment

by:theoaks
ID: 24086838
To disable SecureNAT, you must disable the predefined HTTP protocol from the Web proxy filter.

this will mean that application layer filtering will no longer apply, so you wouldnt be able to monitor any traffic.

affectively turning off securenat bypasses the webproxy.
0
 
LVL 5

Expert Comment

by:theoaks
ID: 24129492
response or points please
0
 

Accepted Solution

by:
hadoka earned 0 total points
ID: 24131179
You didn't answer my question ... I need to route the ips , which mean that i want the requests when its coming out the ISA server appears the IP of original pc request ..

Ex:

My Situation now :

PC ( 192.168.2.2 ) >>> ISA Server ( 192.168.2.1)>> HTTP Request (192.168.2.1)

I want this and i had seen it before but unforutnately i can get it :

PC ( 192.168.2.2 ) >>> ISA Server ( 192.168.2.1)>> HTTP Request (192.168.2.2)
0

Featured Post

IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

Suggested Solutions

UPDATE - 6/15/2011 Added support for Release Update 6 Maintenance Patch 2 Point Patch 1 (RU6 MP2 PP1). Fixed a defect in the username field that was hard-coded to look for a specific domain (left over code from testing). This release will be the …
So the following errors occurs in 2 ways that I am aware of at this stage, and you receive one of the following error messages: ERROR 1. When trying to save a rule: No Web listener is specified for the Web publishing rule Autodiscovery Publishin…
It is a freely distributed piece of software for such tasks as photo retouching, image composition and image authoring. It works on many operating systems, in many languages.
Internet Business Fax to Email Made Easy - With eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…

706 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

15 Experts available now in Live!

Get 1:1 Help Now