Windows Forum

Ask something
Discussion Locked

Internet not working on ISA locally

0 helpful
3 replies

by an_it_guy

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hi,
I recently had to rebuild & reconfirgur my ISA Server. It gets the VSAT net connection via a DirecWav modem.
All clients get internet connection with 'Firewall clients' installed on them, but ISA server locally doesnt get internet!
It works ok if I use it as a SecureNAT client, that is by entering the LAN-IP of ISA into IE connection settings.
What could be the problem?

3 replies

by cg it

1 or 2 NICS? Stand alone server? log on localy meaning off the domain network? Static IP addressing? on one nic or both is using 2?

why are you trying to access the internet on the ISA server in the first place? and if so why off the domain network? If for service pack/patch management, just download the network install service packs and patches and install that way.

you really answered your own question of why using Secure NAT client e.g. ip of ISA into IE works is in your question. Secure NAT client IS the firewall client program off ISA server and provides proxy server info [which is what ISA server is] to IE e.g. IP address umpty ump is the gateway out and DNS is umpty ump ip address [your ISP DNS IP address]. the LAN NIC if your using only one NIC IS the Gateway NIC out for the network [which to be redundant again, is the information the firewall client provides to network users browsers to provide internet access].

by an_it_guy

~2 NIC, one one LAN and other for VSAT modem bearing live static IP.
~Logging to the domain with domain administrator account, but trying to use internet locally, that is what i meant.
~Want to use EFS (pop3 to exchange2k mail downloader) on ISA server, hence need internet locally. EFS doesn't work if ISA gets internet as a SecureNAT client - thats the problem.

by dgolic

Try the tip i read at isaserver.org, it says that you should set up IE on isa server to use proxy by internal IP address (not name). It works fine if you do not have VPN Server on ISA Server.

This discussion is closed to new replies.