ISA Clients >> Firewall client

by Phil Cook » Tue, 07 Dec 2004 00:28:29 GMT

I have a site to site vpn set up using pptp. I cannot get the 2004
firewall client to run on the machines at the remote site and connect
to the 2004 isa server even though I have a rule allowing all traffic
between the remote and the local office. Anyone have an idea why this
is not working or what I could look for?

ISA Clients >> Firewall client

by Jim Harrison [MSFT] » Sat, 25 Dec 2004 01:32:37 GMT


Most likely, it's a name resolution issue.
You can determine this with the following commands:

(try to resolve the ISA name)
ping isaserver -n 1
..if this succeeds, the client can resolve the ISA name. If not, fix this first

(try to resolve the automatic discovery entry in DNS/WINS)
ping wpad -n 1
..if this succeeds, the client can resolve the automatic discovery name. If not, add a "wpad" record to your DNS / WINS

--
Jim Harrison [ISASE]
Read the help, books and articles!

This posting is provided "AS IS" with no warranties, and confers no rights.



I have a site to site vpn set up using pptp. I cannot get the 2004
firewall client to run on the machines at the remote site and connect
to the 2004 isa server even though I have a rule allowing all traffic
between the remote and the local office. Anyone have an idea why this
is not working or what I could look for?

ISA Clients >> Firewall Client

by aXNzYW1p » Wed, 04 Jan 2006 02:39:02 GMT

Hello,

How can i configure a workstaion without the FW Client installed to access
the internet (protocols and web) ???

I have it working in my company with Isa server 2000, but i cant configure
in Isa 2004.

ISA Clients >> Firewall client

by Daniel » Mon, 05 Feb 2007 17:58:20 GMT

If i use firewall client in isa 2004 user can only use web browser for
internet activities and what if they want to use ms outlook for
emailing ?

Rgds
Daniel

ISA Clients >> Firewall client

by Jens Baier » Tue, 06 Feb 2007 02:10:07 GMT

Hi,


the Firewall Client can be used for all TCP/UDP connections. You have to
create a Firewall rule that allows the traffic and the following could also
be the cause of your problems:
http://www.isaserver.org/articles/2004olpop3smtp.html

regards Jens
www.nt-faq.de

ISA Clients >> Firewall client

by Daniel » Wed, 07 Feb 2007 12:15:00 GMT


How to allow authentication if use firewall client by using windows
user account? isnt that every connection must be authenticated ?

Rgds
Daniel

ISA Clients >> Firewall client

by BDog » Wed, 14 Feb 2007 10:18:28 GMT


Sorry to threadjack, but it sounds like Daniel has problems similar to mine,
so I'll consider this piggybacking ;)

Is there a reason why my FWC's cannot use Outlook MAPI to our Exchange
server on the Internal network when they are connected via VPN? The VPN
successfully connects, the computer synch's fine. Outlook opens, but opens
in Offline mode only. When you try to Send/Receive, the sending succeeds
but the next step (ours just lists the name of the Exchange server so I
don't know if it's trying to get the Offline Address Book or just synch)
fails with the error message:

"Task 'EXCH' reported error (0x8004011D): 'The server is not available.
Contact your administrator if this condition persists.'"

At the same time, when Outlook is not working, the users also cannot browse
the internet. They can ping sites successfully and use protocols like RDP,
but HTTP does not seem to work. As soon as the firewall client is disabled,
everything starts working. Re-enable it and everything stops again. The
ISA logs and live monitoring do not give any Denied requests or any
indication whatsoever of why this isn't working.

Any help is appreciated.

TIA

ISA Clients >> Firewall client

by Daniel » Wed, 14 Feb 2007 10:54:52 GMT


Jens, i have successfully configure firewall client to use outlook but
there is intermitten connection problem to pop/smtp server. Sometimes
it cannot contact smtp or pop server. But after restart firewall
client then it is ok. Any idea ? Thanks

Rgds
Daniel

ISA Clients >> Firewall client

by BDog » Fri, 16 Feb 2007 02:05:50 GMT

bump

ISA Clients >> Firewall client

by Daniel » Thu, 31 May 2007 10:45:36 GMT

When i enable firewall client, isn't there is a login windows for login ? It
used to have but i don;t know it won't come out anymore. Pls advise. Thanks

Daniel

ISA Clients >> Firewall client

by Jim Harrison (ISA SE) » Thu, 31 May 2007 23:59:53 GMT

No; the FWC uses the credentials of the account associated with the program
that is making the connection through Winsock.
There is no way to tell it to "use these credentials" for all programs.

--
Jim Harrison (ISA SE)

This posting implies no warranty and confers no rights.





When i enable firewall client, isn't there is a login windows for login ? It
used to have but i don;t know it won't come out anymore. Pls advise. Thanks

Daniel

ISA Clients >> Firewall client

by Daniel » Fri, 01 Jun 2007 09:05:48 GMT

I used to see login windows for user to login name and password ? how to
keep track of user visiting site ?

Daniel

ISA Clients >> Firewall client

by Jim Harrison (ISA SE) » Fri, 01 Jun 2007 23:15:47 GMT

You see these from the application itself; never from the FWC.
You'll have to make sure your rules use "authenticated users" instead of
"all users".
--
Jim Harrison (ISA SE)

This posting implies no warranty and confers no rights.





I used to see login windows for user to login name and password ? how to
keep track of user visiting site ?

Daniel

ISA Clients >> Firewall client

by Daniel » Sat, 02 Jun 2007 00:12:35 GMT

Only FWC can be used with authenticated users ? Previously there is a login
windows prompting user to enter name and password and in the log i can see
user name.

Daniel

ISA Clients >> Firewall client

by Jim Harrison (ISA SE) » Sat, 02 Jun 2007 03:21:59 GMT

If you see an auth prompt, this is being produced by the application
(browser, for instance); not the FWC.
Maybe these will help:
http://msdn2.microsoft.com/en-us/library/ms812546.aspx
http://www.isaserver.org/tutorials/ISA_Clients__Part_1__General_ISA_Server_Configuration.html
http://www.isaserver.org/tutorials/ISA_Clients__Part_2_SecureNAT_and_Web_Proxy_Client.html
http://www.isaserver.org/tutorials/ISA_Clients__Part_3_The_Firewall_Client.html
http://www.microsoft.com/technet/isa/2006/clients.mspx
--
Jim Harrison (ISA SE)

This posting implies no warranty and confers no rights.





Only FWC can be used with authenticated users ? Previously there is a login
windows prompting user to enter name and password and in the log i can see
user name.

Daniel

Similar Threads

1. XP Firewall and ISA Firewall Client Question

When deloying the ISA firewall client should the XP SP2 firewall be disabled 
or can it coexist with the ISA Firewall Client?


2. FTP client access issues using firewall client - ISA Configuration

3. Firewall Client ISA2000/2004 + XP/Vista Clients + SBS 2k3 Prem

Hi and thx for the Answer,

i have installed the Firewall Client on a XP and one Vista Client, now i've 
got the following Problem:

- I can establish a VPN Connection, but no RDP. When i click on Connect, i 
get the message, that this Computer can't connect to the Remotecomputer.
If i turn of the Firewall Client, it runs like before.

Did I miss somehing or what do I have to do now? I'm a little helpless atm.

Greets
Hermann Schellhorn

4. Firewall Client ISA2000/2004 + XP/Vista Clients + SBS 2k3 Premium

5. ISA firewall client vs Proxy client

I am unable to get certain programs on my desktops to connect to the 
internet (through ISA firewall client) that worked ok with my previous 
sbs4.5 installation (Proxy client 2). eg. Norton AntiVirus Automatic 
LiveUpdate, Kazaa, and others. I have tried briefly turning of Packet 
filtering but this does not resolve the problems. I know that the firewall 
clients are working ok as Outlook Express works ok. Can anyone suggest what 
I need to do?

Thanks
Stewart 


6. Clients can disable the Firewall Client? - ISA Clients

7. Compatibility between Winsock Proxy Client 2.0, Firewall Client 20

Hi friends, my question is there is some compatibility issue with the 
earliers versions o Firewall Client ISA Server 2004 and Winsock Proxy Client 
2.0 and Firewall Client ISA 2000? 
Could those earliers versions configure the web browser automatically too? 
and 
What are their limitations?

Really I was searching all the web for information in Internet but I 
couldn't find anything about compatibility between ISA Server 2004 and 
earlier versions of Firewall Client, I will apreciate any help or link.

thanks in advance, 
Felipe C.

8. Firewall Client vs Proxy Client - ISA Clients