asked on

Bypass Stateful Packet Inspection - ISA 2006

Good Afternoon,

I need to disable SPI between a couple of IP Addresses from an external network to a device on my internal network through ISA 2006.

We are running a clinical trial and the application/device that needs to upload the data is being blocked by ISA due to it's inbuilt SPI

Has anyone done this before?

Thanks,

Gerald

Keith Alabaster

Not a chance. Stateful packet inspection is a fundamental process that is responsible - in part - for the integrity of sessions and connections. No way you'd turn that off.

gezzam

ASKER

Can I create a rule between the two IP addresses that disable SPI for that rule only?

The documentation from the trial company states that

Stateful Packet Inspection (SPI): If your network uses SPI, consider setting rules in the Firewall to not perform SPI on traffic originating from or terminating to the IP addresses listed in this document.

or

Could I turn it off temporarily just to see if this is the cause so I can investigate further

Keith Alabaster

Not as far as I am aware, it is an inherent feature. The only devices that allow this sort of thing are routers - and ISA Server is not a router.

ASKER CERTIFIED SOLUTION

pwindell

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

gezzam

ASKER

Thanks for the update, the trail company is supplying the client with a Wireless 3G Modem to upload, so it's not going on our network now so it has ceased to be an issue.

Thanks for the responses though.