Firewall Client fails to read URL Sets

[SelbyGlenn]

Hi there,

I hope someone can help me with this as I’ve been stuck on it for days now!

I have an access rule that allows HTTPS access to the external network for both firewall and proxy clients and it works fine. If I then change the destination from external to a URL Set then all HTTPS access fails for firewall clients but those addresses listed in the URL Set still work for proxy clients. As it works for proxy clients I know that the URL set is working. I don’t understand why there should be a difference between the two clients but there is.

For security reasons I need a final solution where web proxy access is disabled and all access is through the firewall client.

Does anyone have any idea why the firewall client is ignoring the URL Set?

Thanks in advance,

Glenn


Glenn
BEng MCSE CCA

 

[InfrArch]

Because web browsing stuff happens through Web Proxy client only. FW client is needed for applacations other than HTTP/HTTPS.
Although you can try to fix it by configuring FW client respectively from the ISA side. This is not recommended.



Victor K (Microsoft Consulting Services)
MCSA/MCSE:Security & Messaging;CNE;CCSE+;CIWSP;CIWSA;Network+;CCNA;nCSE;CISSP