Bypass ISA

I reloaded the system this weekend and of course I have six machines that
need to bypass ISA and I have reviewed all of the hints and I cannot get it
to work...They have multiple applications running and in the past I did
something where they would get past the ISA server..I only had to check off
automatically detect settings in the browser properties. They were getting
their ip through DHCP and dns through the server.. Now the only way to get
that to happen is to set them up with a fixed IP and the ISP DNS settings
and the server browsing is very slow.

Any help would be appreciated..SBS server has one nic running behind
firewall..

Thanks..

Leo

Henry
Mon Dec 01 16:37:21 CST 2003

If you're going to have 6 machines on your network bypassing ISA you may
as well uninstall it all together.

You have ISA guarding the front door and the back door and windows wide
open.

With a one NIC setup you're only using Proxy anyway, Not Ingress/Egress
filtering which is what you you'd be protecting your network with.

How about you tell us what you need/want to achieve ( and your current
configuration ) and we see if we can come up with a secure solution for
you ?

--
Henry Craven.

========= Post It Appropriately: ============
SBS 4/4.5 : microsoft.public.backoffice.smallbiz
SBS 2000 : microsoft.public.backoffice.smallbiz2000
SBS 2003 : microsoft.public.windows.server.sbs
=====================================
"Leo Fredette" <lfredette@massagent.com> wrote in message
news:ebqLfHBuDHA.2308@TK2MSFTNGP11.phx.gbl...
> I reloaded the system this weekend and of course I have six machines
that
> need to bypass ISA and I have reviewed all of the hints and I cannot
get it
> to work...They have multiple applications running and in the past I did
> something where they would get past the ISA server..I only had to check
off
> automatically detect settings in the browser properties. They were
getting
> their ip through DHCP and dns through the server.. Now the only way to
get
> that to happen is to set them up with a fixed IP and the ISP DNS
settings
> and the server browsing is very slow.
>
> Any help would be appreciated..SBS server has one nic running behind
> firewall..
>
> Thanks..
>
> Leo
>
>

Jim
Mon Dec 01 21:43:02 CST 2003

The workstation should still have it's dns pointing to the sbs ip.

"Leo Fredette" <lfredette@massagent.com> wrote:

>I reloaded the system this weekend and of course I have six machines that
>need to bypass ISA and I have reviewed all of the hints and I cannot get it
>to work...They have multiple applications running and in the past I did
>something where they would get past the ISA server..I only had to check off
>automatically detect settings in the browser properties. They were getting
>their ip through DHCP and dns through the server.. Now the only way to get
>that to happen is to set them up with a fixed IP and the ISP DNS settings
>and the server browsing is very slow.
>
>Any help would be appreciated..SBS server has one nic running behind
>firewall..
>
>Thanks..
>
>Leo
>

Jim B. SBS MVP
remove the mvp to send email

Leo
Tue Dec 02 09:21:40 CST 2003

The DNS is pointing to the server IP and the rest of the network (25
machines) use ISA for reporting purposes. I am not sure of the setting that
I changed before..I think I need ISA for Exchange..I did load the firewall
client on two machines and it helped with getting to two sites, but now the
browsing to a member server is slower than syrup..if I disable the firewall
client it runs fine but then they cannot access the sites.

Any hints would be appreciated..or if I can exclude the machines from ISA
which is what I thought I did already and did not work would make a
difference..

Leo

"Leo Fredette" <lfredette@massagent.com> wrote in message
news:ebqLfHBuDHA.2308@TK2MSFTNGP11.phx.gbl...
> I reloaded the system this weekend and of course I have six machines that
> need to bypass ISA and I have reviewed all of the hints and I cannot get
it
> to work...They have multiple applications running and in the past I did
> something where they would get past the ISA server..I only had to check
off
> automatically detect settings in the browser properties. They were
getting
> their ip through DHCP and dns through the server.. Now the only way to get
> that to happen is to set them up with a fixed IP and the ISP DNS settings
> and the server browsing is very slow.
>
> Any help would be appreciated..SBS server has one nic running behind
> firewall..
>
> Thanks..
>
> Leo
>
>

Henry
Tue Dec 02 20:34:44 CST 2003

Well let's leave ISA in place where it should be, and address your
problem - which is the slow browsing to the member server. ( ( this is a
File Server or are you talking of Web Browsing to the Member server as an
Internal or Public Web Server ? )

What O/Ss are the six Machines, and what are their IPconfig /all results
?

What are the IP addresses of the SBS and the Member server ?

--
Henry Craven.

========= Post It Appropriately: ============
SBS 4/4.5 : microsoft.public.backoffice.smallbiz
SBS 2000 : microsoft.public.backoffice.smallbiz2000
SBS 2003 : microsoft.public.windows.server.sbs
=====================================


"Leo Fredette" <lfredette@massagent.com> wrote in message
news:ulESHgOuDHA.556@TK2MSFTNGP11.phx.gbl...
> The DNS is pointing to the server IP and the rest of the network (25
> machines) use ISA for reporting purposes. I am not sure of the setting
that
> I changed before..I think I need ISA for Exchange..I did load the
firewall
> client on two machines and it helped with getting to two sites, but now
the
> browsing to a member server is slower than syrup..if I disable the
firewall
> client it runs fine but then they cannot access the sites.
>
> Any hints would be appreciated..or if I can exclude the machines from
ISA
> which is what I thought I did already and did not work would make a
> difference..
>
> Leo

Jim
Tue Dec 02 20:38:20 CST 2003

What happens when you do start/run and type \\memberservername and
what happens when you type \\memberserverip? Do you have dhcp option
46 set to 0x8 on the server? Are the workstations getting their ip
from the server? Do you have two nics in the server? Are you at SP4 on
the server and have you run the 292822 edits?

"Leo Fredette" <lfredette@massagent.com> wrote:

>The DNS is pointing to the server IP and the rest of the network (25
>machines) use ISA for reporting purposes. I am not sure of the setting that
>I changed before..I think I need ISA for Exchange..I did load the firewall
>client on two machines and it helped with getting to two sites, but now the
>browsing to a member server is slower than syrup..if I disable the firewall
>client it runs fine but then they cannot access the sites.
>
>Any hints would be appreciated..or if I can exclude the machines from ISA
>which is what I thought I did already and did not work would make a
>difference..
>
>Leo
>
>"Leo Fredette" <lfredette@massagent.com> wrote in message
>news:ebqLfHBuDHA.2308@TK2MSFTNGP11.phx.gbl...
>> I reloaded the system this weekend and of course I have six machines that
>> need to bypass ISA and I have reviewed all of the hints and I cannot get
>it
>> to work...They have multiple applications running and in the past I did
>> something where they would get past the ISA server..I only had to check
>off
>> automatically detect settings in the browser properties. They were
>getting
>> their ip through DHCP and dns through the server.. Now the only way to get
>> that to happen is to set them up with a fixed IP and the ISP DNS settings
>> and the server browsing is very slow.
>>
>> Any help would be appreciated..SBS server has one nic running behind
>> firewall..
>>
>> Thanks..
>>
>> Leo
>>
>>
>

Jim B. SBS MVP
remove the mvp to send email

Leo
Wed Dec 03 07:25:33 CST 2003

Found the answer..thanks for all of your help..

Microsoft Knowledge Base Article: 309633

Worked like a charm..

Leo

"Leo Fredette" <lfredette@massagent.com> wrote in message
news:ebqLfHBuDHA.2308@TK2MSFTNGP11.phx.gbl...
> I reloaded the system this weekend and of course I have six machines that
> need to bypass ISA and I have reviewed all of the hints and I cannot get
it
> to work...They have multiple applications running and in the past I did
> something where they would get past the ISA server..I only had to check
off
> automatically detect settings in the browser properties. They were
getting
> their ip through DHCP and dns through the server.. Now the only way to get
> that to happen is to set them up with a fixed IP and the ISP DNS settings
> and the server browsing is very slow.
>
> Any help would be appreciated..SBS server has one nic running behind
> firewall..
>
> Thanks..
>
> Leo
>
>