[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 417
  • Last Modified:

Configuring ISA server 2006 Standard Edition as a Tunnel behind a firwal

Dear All,

I have a problem ,  I have a hardware firewall which is configured properly but it doesn't have traffic speed monitoring , so i decided to Configure and ISA server as tunnel to install third party software to see the Speed traffic consumption, I mean this isa server will be between the Client User and the hardware Firewall and the ISA server is for traffic monitoring only, but internet privileges will be given through the firewall hardware ( Ex: Users have full internet access , User Doesn't Have Internet Access at all ) .

I know to do that i have to enable routing not NAT protocol , so firewall can recognize the user ip and give him the privilege which had been assigned to his IP .

Al though i had Enabled that .. but still the isa server is using Securenate and http requests appears to the hardware firewall as from ISA server which off course have full rights to internet Access..

I need to Enable Complete routing which make the users requests appears from his IP ( All his requests ) . .. but unfortunately i couldn't.

Can anybody help me with this??


Regards
Mohamed Hadoka
0
hadoka
Asked:
hadoka
  • 2
1 Solution
 
theoaksCommented:
To disable SecureNAT, you must disable the predefined HTTP protocol from the Web proxy filter.

this will mean that application layer filtering will no longer apply, so you wouldnt be able to monitor any traffic.

affectively turning off securenat bypasses the webproxy.
0
 
theoaksCommented:
response or points please
0
 
hadokaAuthor Commented:
You didn't answer my question ... I need to route the ips , which mean that i want the requests when its coming out the ISA server appears the IP of original pc request ..

Ex:

My Situation now :

PC ( 192.168.2.2 ) >>> ISA Server ( 192.168.2.1)>> HTTP Request (192.168.2.1)

I want this and i had seen it before but unforutnately i can get it :

PC ( 192.168.2.2 ) >>> ISA Server ( 192.168.2.1)>> HTTP Request (192.168.2.2)
0

Featured Post

Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now