ISA Clients, add private route to clients

microsoft.public.isa.clients - Microsoft Internet Security and Acceleration


ISA Clients >> add private route to clients

by david » Sun, 12 Apr 2009 19:35:16 GMT

How can I configure ISA to tell the firewall client not to handle 10.x.x.x
adresses?

My home setup has been working with just Web Proxy. Now I need to make Bit
Torrents work, so I've added the Firewall client.

The client at 192.168.x.x has a private route over OpenVPN to a server at
10.1.x.x

ROUTE PRINT on the client shows that there is an adapter with 10.20.x.x,
which is the gateway to 10.1.x.x. This used to work.

Now, with the firewall client installed, the client route table is ignored,
and TRACERT shows that the route in use is via 192.168.x.x, the ISA server,
where it fails, because the ISA server doesn't have a route to 10.x.x.x.

What can I do to make this work?

(david)




Top

ISA Clients >> add private route to clients

by Jens Baier » Sun, 12 Apr 2009 20:42:15 GMT


Hi,


http://www.isaserver.org/articles/2004directaccessp2.html


Bit Torrent and ISA Server, a great combination :-)

--
Gruss Jens
http://www.it-training-grote.de
http://forefront-tmg.de
https://mvp.support.microsoft.com/profile/Marc.Grote
http://blog.it-training-grote.de
Top

ISA Clients >> add private route to clients

by david » Mon, 13 Apr 2009 08:25:50 GMT

Thanks, that worked. (Another tab in the same place
for ip address ranges). Update rules make it difficult
to test, but it's definitely working now.


If you don't laugh, you cry....


(david)
Top
Similar Threads

1. adding a route to the client - VPN on ISA

2. *ISA Private to Private Networking* 

    I am trying to have isa 2004 work as a front end firewall but it doesnt 
seem to work.

This is my setup:  I have a DSL Connection and the Telco issued a DSL Router 
than issues Private network addresses (192.168.1.0/24).  I would like to set 
my ISA server so that my network (10.0.0.0/24) can use.

Problem I think is that both networks are private and ISA doesnt like it.

Perhaps someoen can walk me past this. Please.

I have tryed to set my external card to IP: 192.168.1.2 MASK: 255.255.255.0 
GW: 192.168.1.1 (for the DSL Router) - for the external card and for the 
internal IP 10.0.0.2 MASK: 255.255.255.0 GW: (nothing) etc....

It doesnt seem to work.   HELP PLZ

3. Need to allow private net clients to access DMZ

4. Adding Persistent Routes on ISA Server 

Is it considered bad practice to use a persistent route on an ISA Server?
I have a target host behind a firewall on a local segment attached to ISA,
but no router knows how to get to that host other than the firewall attached
to it.    So unless I enter the persistent route ISA won't have any idea how
to route the packet.

-- 
Will

5. How to add static routes to ISA Server

6. Add route 

Hello.
We have a Isa server with 4 interfaces. One interface is 
the outbound the other tree are internal and in the 
LATtable.

We added a 5 interface, and we added this one also in the 
LATtable.  If we look to the route table every thing looks 
good. But we can not reach the other networks on the ISA 
server. There are no default gateways.
So, we can rout between network 2-3-4 but not with network 
5. 
We stopt even the Firewall but the problem stays.
Is't a firewall isseu ore a windows 2000 server routing 
problem. At this moment we have no idea where to search.
Thanks.

7. ISA 2004 - Routing Scenario - HTTP - Client IP address - ISA Configuration

8. Some clients are routed to the wrong NIC (ISA 2004) 

Hi!

We have installed ISA 2004 on our backupserver for filtering and blocking 
traffic to our different networks.
It seems to work fine except for a few clients...

The traffic to these clients seems to be routed to the wrong NIC (DMZ nic 
instead of internal NIC) on the backupserver and therefore are blocked. (The 
ISA-rules prevent traffic from the DMZ-nic to pass to the internal network.)

Is there a way to handle how these specific clients are routed on the 
ISA-server or could there be some kind of corrupt routing-table?

All other clients on this network have no problem.

Regards
Marcus