hadoka
asked on
Configuring ISA server 2006 Standard Edition as a Tunnel behind a firwal
Dear All,
I have a problem , I have a hardware firewall which is configured properly but it doesn't have traffic speed monitoring , so i decided to Configure and ISA server as tunnel to install third party software to see the Speed traffic consumption, I mean this isa server will be between the Client User and the hardware Firewall and the ISA server is for traffic monitoring only, but internet privileges will be given through the firewall hardware ( Ex: Users have full internet access , User Doesn't Have Internet Access at all ) .
I know to do that i have to enable routing not NAT protocol , so firewall can recognize the user ip and give him the privilege which had been assigned to his IP .
Al though i had Enabled that .. but still the isa server is using Securenate and http requests appears to the hardware firewall as from ISA server which off course have full rights to internet Access..
I need to Enable Complete routing which make the users requests appears from his IP ( All his requests ) . .. but unfortunately i couldn't.
Can anybody help me with this??
Regards
Mohamed Hadoka
I have a problem , I have a hardware firewall which is configured properly but it doesn't have traffic speed monitoring , so i decided to Configure and ISA server as tunnel to install third party software to see the Speed traffic consumption, I mean this isa server will be between the Client User and the hardware Firewall and the ISA server is for traffic monitoring only, but internet privileges will be given through the firewall hardware ( Ex: Users have full internet access , User Doesn't Have Internet Access at all ) .
I know to do that i have to enable routing not NAT protocol , so firewall can recognize the user ip and give him the privilege which had been assigned to his IP .
Al though i had Enabled that .. but still the isa server is using Securenate and http requests appears to the hardware firewall as from ISA server which off course have full rights to internet Access..
I need to Enable Complete routing which make the users requests appears from his IP ( All his requests ) . .. but unfortunately i couldn't.
Can anybody help me with this??
Regards
Mohamed Hadoka
response or points please
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
this will mean that application layer filtering will no longer apply, so you wouldnt be able to monitor any traffic.
affectively turning off securenat bypasses the webproxy.