how do I turn off ISA

[chaswilcox]

I apologize if I appear clueless. I am setting up a VPN and am having an issue that appears to be packet filter related. I want to set ISA to allow any and evrything (the box is behind a hardware firewall anyway) until I sort out the VPN and then restart ISA and go from there. I didn't build the box (win2000 server) and am a total newbie at ISA, I don't see a disable option anywhere.
TIA
-C

 

[Gersen]

I hope this answers the question. I'm an ISA newbie also.

When I started learning ISA, I wanted to start out with it passing all traffic along unfiltered. I opened "ISA Management", then opened "Access Policy" and "Protocol Rules" under that. I then clicked the "configure a new policy" link, and made a rule named "All", and if you choose the defaults all the way through the rule wizard it creates a rule that allows all IP traffic from any destination.

Check the defaults as you go, in case yours aren't the same as mine, but in my case the defaults were "Allow", "All IP traffic", "Always" and "Any request".

I don't know if it's necessary, but I stop and restart the services after making a change, under "Monitoring", "Services".

good luck

 

[chaswilcox]

Thanks

 

[SgtB]

If you're setting up the VPN on the hardware firewall then don't route VPN traffic through the ISA server. You can still route outbound internet related traffic through the ISA server. If you need more info let me know. Include hardware firewall type as well.

________________________________________
Check out

http://www.security-forums.com

 

[chaswilcox]

The box acting as ISA server is also the VPN server, so wat I ednded up doing was removing ISA until I got the VPN properly configured.

I will now reinstall ISA when I have documented what the filters I want are and how to test to make sure I have coinfigured correctly.

The firewall is a Zyxel that is pretty robust in its filtering and NAT capability, so I am not needing the VPN/ISA server to handle those issues. I was thinking of using the ISA to lock the box up tighter, but am not in a hurry.
If I run into ?'s when I do reinstall, I'll post here.
Thanks
-C