I’ve got two seperate Active Directory domains that I want accessing the internet through an ISA 2004 proxy server. The proxy is configured to direct requests to an external upstream proxy. Our server is a member of domain A, and I want users on domain A to require authentication for traffic monitoring purposes. Domain B users don’t need to be monitored so authentication is turned off (I figured that would be the easiest way to give them annonymous access).
I have configured both domains as seperate Networks in ISA, using the default Internal network for domain A and a new entry for B. I have an access rule to allow all outgoing for all users from B to external, and another to allow all outgoing from the allowed user group in A to external.
I can access the web from domain A, but not B. From domain B IE attempts to contact the IP of the ISA server eventually timing out with the server no found or DNS error message. The ISA log shows connections from the domain B network to Local Host on the proxy port and a Denied action with no rule specified. This is a problem as it gives no indication as to WHY it’s denied. I have tried using a all outgoing/all users/all networks rule with the same result. I just don’t get why it’s being blocked.
