Question about configuration in ISA 2004 SP2

[aldi]

Is it possible configure ISA 2004 SP2 to allow a device to connect to the internet without installing the client firewall software?

My question is because I have a Barracuda Spam filter behind my ISA server and It seems that ISA 2004 doesn't let anything to connect to the internet without the client firewall. I know that with ISA 2000 it was possible.

Please help! Thanks a lot!

 

[Grenage]

We use ISA2004 here and don't install the client firewall on any machines! As for the Barracuda, we use an Ironmail (similar sort of box) but that connects directly through the firewall, rather than through ISA...


Carlsberg don't run I.T departments, but if they did they'd probably be more fun.

 

[aldi]

Grenage, thanks for the reply.

I also had problem with messages being relayed from outside my domain, and it got fixed when I added the barracuda "computer" to the SBS Smtp Outbound Access Rule.

I added the barracuda device to SBS Internet Access Rule, but it didn't work.

Any idea where should I add the barracuda device in the ISA rules, so that it is allowed connectivity to http?

I tried creating a new rule, no luck either, maybe the order has anything to do, but i'm afraid to change the order and screw everything.

Let me know please,

 

[Grenage]

I know what it's like to fear touching something

So the SBS server is the machine hosting the internet connection for the rest of the network? I haven't used SBS, that's why I ask. The firewall rule order does matter, but only to a degree; as long as there is not a rule above it refusing the connection you will be ok. Did the new rule you create go straight to the bottom?

Does ISA require authentication, and can it be added in the Barracuda? I know that there is an option in ISA2004 where you can specify whether or not the firewall client is required. As I mentioned earlier, we don't use it on the clients. If you manually direct a workstation to ISA using IE proxy settings, does it work?

Unfortunately I've not personally tried to route e-mail through a proxy server, so this really is guess work.


Carlsberg don't run I.T departments, but if they did they'd probably be more fun.