ISA Server DNS Issue

Posted on 2011-10-07
Medium Priority
Last Modified: 2013-02-16
I have issu with on of ISA servers; for this server when i goung to nslookup it's going to the extenral DNS for thw WAN NIC then it cannont connect to domain and take long time to log on . Also i have other 2 ISA servers when going for the nslookup it's going to the LAN NIC DNS server. I need to ensure that the server goonig to the internal DNS on the LAN NIC.
Question by:Haetham
  • 3

Expert Comment

ID: 36938741
Hi Hetham,

You Can Do following Steps to resolve the issue/

Check The Primary DNS Setting on Your LAN Card if its IP is other than your domain controller (DNS) then change it also check the perefred setting.

Check also the host file for ISA Server

Check The Rules for Allowances of DNS for client on ISA Server

I Hope it Works

Osama Mansoor
LVL 51

Expert Comment

by:Keith Alabaster
ID: 36938921
You do not use a host file on the ISA server when it is on a domain - ISA basics.

Author Comment

ID: 36943620
Dear all ; let me say it in other way: i have 3 ISA server Domain Members where the LAN nic configured with the Internal DNS and the WAN nic  configured with Rreal DNS; for 2 of this servers when i request Nslookup  it's going to the Internal DNS and on the 3rd one going to the Real DNS.
what it the reason for the either cases ?
I Hope it's clear now
LVL 51

Accepted Solution

Keith Alabaster earned 2000 total points
ID: 36944388
Let me say it the way I have already said it - you need to read the article - which will tell you that you cannot have the 'real' dns on the ISA external nics, it will not work properly. The external ISA nics MUST be blank and the internal nics point to the internal dns servers. The inetrnal DNS servers use the forwarders tab to point to the REAL dns external to your ISA's. Hopefully this is clear now. Your setup is incorrect - that is the reason.

The likely reason why you are getting a difference between 2 systems and the tird system is that on system one and two you have the internal nic listed first in the bind order and the thirdwith tyhe external nic first in the bind order.

However, you need to read up on how the winfows OS, DNS and networloing operates. There is no logic behind which dns the asystem will use, it is pure luck every timne it performs a lookup.

Bottom line - read the article and you will be illuminated.

Featured Post


Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Outlook for dependable use in a very small business   This article is about using the Outlook application (part of Microsoft Office) in a very small business, or for homeowners where dependability and reliability are critical requirements. This …
If you troubleshoot Outlook for clients, you may want to know a bit more about the OST file before doing your next job. IMAP can cause a lot of drama if removed in the accounts without backing up.
To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…
As many of you are aware about Scanpst.exe utility which is owned by Microsoft itself to repair inaccessible or damaged PST files, but the question is do you really think Scanpst.exe is capable to repair all sorts of PST related corruption issues?
Suggested Courses

864 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question