ISA 2004 User Authentication

Hi All,

I'm facing a small problem when working with ISA 2004 on SBS 2003. I know that ISA creates an Internet Users group and all my users are a member of this group. I'm trying to set my network in such a way that only specific users have access to internet and everyone has access to only POP and SMTP.

To do that, I created a new Security Group called Mail Users, and I removed all the users I did not want to give internet access to from Internet Users and moved them to Mail Users.

I then created a rule on ISA to Block all HTTP and HTTPS requests from Mail Users, and created a rule to Allow POP right before that. See screenshot attached.

However, as soon as I do that, ISA blocks the Internet for Internet Users as well, so no one has internet working.

Does that make sense?

Do let me know what you think!

Thanks a lot
Jatin

5-22-2009-7-18-53-PM.png
jatinahujaAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Titan22Commented:
Make an allow rule for all users that goes above the deny rule for mail users.
0
jatinahujaAuthor Commented:
Hey..thanks for the reply! :) I'm not at work right now to test it out. But I recall that if I do that, it somehow allows even the Mail Users to have internet, does that make sense? I get the feeling that the ISA install isn't coupled as tightly with AD in my case...hmm

0
Titan22Commented:
You can also do it the other way, just put in the group you want to have Internet access as rule 2 and then rule three would be deny all. Check out this link:

http://www.isaserver.org/articles/ISA2004_AccessRules.html

Go about halfway down the page and there are examples of setting up user and group rules.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
jatinahujaAuthor Commented:
Oh that's brilliant..I'm going to read that thing up and try somethings at work tomorrow, I'll keep you posted on how that comes along! Thank you! :)
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft Forefront ISA Server

From novice to tech pro — start learning today.