ISA and laptops

I suppose this question has already been asked, but I can't find a clear
answer in old posts

I am istalling a second NIC and ISA on and existing SBS2000

On this network there are some laptops
I don't want the users to mess with the settings every time they get on and
off the network

How do I have to set up ISA?

I don't need any control over outbound traffic
I just want to allow incoming vpn connections
I am not using DHCP (all static IP addresses)

Thanks,
Filippo

David
Thu Sep 18 08:25:21 CDT 2003

Filippo:

Very easy configuration. You'll want to use SecureNat--go to
www.isaserver.org for this and most of your simple configuration settings.

--
David M. Streb, MCSE
Microsoft Certified Partner
Specializing in Exchange
and FrontPage Hosting
http://www.exiis.net
Dave at exiis dot net
"Filippo" <inutile@nospam.com> wrote in message
news:uDs1wIefDHA.3076@tk2msftngp13.phx.gbl...
> I suppose this question has already been asked, but I can't find a clear
> answer in old posts
>
> I am istalling a second NIC and ISA on and existing SBS2000
>
> On this network there are some laptops
> I don't want the users to mess with the settings every time they get on
and
> off the network
>
> How do I have to set up ISA?
>
> I don't need any control over outbound traffic
> I just want to allow incoming vpn connections
> I am not using DHCP (all static IP addresses)
>
> Thanks,
> Filippo
>
>

Steve
Thu Sep 18 08:34:57 CDT 2003

Filippo wrote:

> I suppose this question has already been asked, but I can't find a
> clear answer in old posts
>
> I am istalling a second NIC and ISA on and existing SBS2000
>
> On this network there are some laptops
> I don't want the users to mess with the settings every time they get
> on and off the network
>
> How do I have to set up ISA?
>
> I don't need any control over outbound traffic
> I just want to allow incoming vpn connections
> I am not using DHCP (all static IP addresses)
>
> Thanks,
> Filippo

Don't install the ISA Firewall client on the laptops. Don't configure
IE to use a proxy. Make sure the laptops point to the SBS as default
gateway, and set Protocol Rules up for them in ISA to allow access out.

BTW, why are you not using DHCP? Static IP addressing is mad.

--
Steve Foster [SBS MVP]
---------------------------------------
MVPs do not work for Microsoft. Please reply only to the newsgroups.

Filippo
Thu Sep 18 09:12:33 CDT 2003

If I don't have any "special apps" running on the computers that need
internet access,
do I still have to set up protocol rules or will the ICW configure all I
need on the server side?

I don't know why I don't use DHCP, I have always done w/o and it's not that
bad...


"Steve Foster [SBS MVP]" <steve.foster@picamar.co.uk> ha scritto nel
messaggio news:eFginmefDHA.460@TK2MSFTNGP12.phx.gbl...
>
> Don't install the ISA Firewall client on the laptops. Don't configure
> IE to use a proxy. Make sure the laptops point to the SBS as default
> gateway, and set Protocol Rules up for them in ISA to allow access out.
>
> BTW, why are you not using DHCP? Static IP addressing is mad.
>
> --
> Steve Foster [SBS MVP]
> ---------------------------------------
> MVPs do not work for Microsoft. Please reply only to the newsgroups.

Steve
Fri Sep 19 06:15:53 CDT 2003

Filippo wrote:

> If I don't have any "special apps" running on the computers that need
> internet access,
> do I still have to set up protocol rules or will the ICW configure
> all I need on the server side?
>
> I don't know why I don't use DHCP, I have always done w/o and it's
> not that bad...
>

The ICW configures access for authenticated workstations only, and
secureNAT clients cannot authenticate. So yes, you will have to do some
manual configuration work in ISA.


--
Steve Foster [SBS MVP]
---------------------------------------
MVPs do not work for Microsoft. Please reply only to the newsgroups.

Filippo
Fri Sep 19 14:21:37 CDT 2003

could you tell me where I can find instructions on how to do that, please?


"Steve Foster [SBS MVP]" <steve.foster@picamar.co.uk> ha scritto nel
messaggio news:%23XFpk9pfDHA.2172@TK2MSFTNGP09.phx.gbl...
> Filippo wrote:
>
> > If I don't have any "special apps" running on the computers that need
> > internet access,
> > do I still have to set up protocol rules or will the ICW configure
> > all I need on the server side?
> >
> > I don't know why I don't use DHCP, I have always done w/o and it's
> > not that bad...
> >
>
> The ICW configures access for authenticated workstations only, and
> secureNAT clients cannot authenticate. So yes, you will have to do some
> manual configuration work in ISA.
>
>
> --
> Steve Foster [SBS MVP]
> ---------------------------------------
> MVPs do not work for Microsoft. Please reply only to the newsgroups.

Steve
Sat Sep 20 07:02:53 CDT 2003

Filippo wrote:

> could you tell me where I can find instructions on how to do that,
> please?
>
>

You need to create Protocol Rules to specify what is allowed/disallowed
in and out, and Site&Content Rules to apply any filtering you want (eg
block advertisers).

Both have simple little wizards to step you through creating rules, and
I would suggest you take a look at the existing ones first to work out
what the bits mean.

--
Steve Foster [SBS MVP]
---------------------------------------
MVPs do not work for Microsoft. Please reply only to the newsgroups.