Users are bypassing proxy? *confused*

[WilliamUT]

I am pushing proxy settings to all my users through a GPO. I have been monitoring my logs and noticing there isnt much activity so I turned off my proxy and people are still getting to the internet. Does anybody know why the browser is bypassing the proxy settings? Is there a way to force the pc to use proxy and nothing else? Thanks

 

[lovalles]

The thing is that clients are not well configured,
client must have ISA server ip on the gateway and dns server on dNS section not isp dns.
check this out and please let me know if this helps.

lovalles

 

[WilliamUT]

i have added the ISA servers ip as the gateway on a test pc and still am able to bypass the proxy to the internet ???

 

[WilliamUT]

This is how I am setup

DNS server is 10.10.58.1
ISA server is 10.10.59.1
Router is 10.10.(58,59,60).11

on the clients we have 10.10.58.1 as the dns and 10.10.58.11 as the router. the dns server cannot see the ISA server (forwarding is not turned on) ...when i took out the router and put the ISA server in it's place it still let them out to the internet bypassing the proxy. im wondering if something in the router is set up to forward to the external internet DNS??? (we dont manage the router at&t does)

 

[lovalles]

Any clients should have configure the router ip.
the router should be connected on the second NIC card.
Where on the clients are you typing the router ip?

 

[WilliamUT]

All the client computers are programmed with the router ip in them not the ISA server ip. BUT when i took out the router ip on the clients and replaced it with the ISA Server ip it still let the client access the internet.

 

[WilliamUT]

I really dont want to run ISA as a firewall...i just want people to use the proxy server...the router is not cabeled directly into the ISA server it's just plugged into a hub just like all the rest of the computers. I have all the browsers set up to go thtough the ISA server.

 

[lovalles]

the configuration must be as follow
in DNS put dns server 10.10.58.1
do not add any other ip for dns
gateway 10.10.59.1

do you have adsl conection or dialup?

 

[WilliamUT]

that is the way i have it set up and it's still letting people out to the internet...i have no other DNS or routers added in the stack.

we are on a t1 which goes to corporate offices

 

[lovalles]

the thing you have its a NAT problem, your router is sending all the packeds to all computers this will make some down peformance on the network, i had it just like you. i recommend you to install a second NIC card and plug the router to that second nic.

 

[WilliamUT]

yea i figured it had something to do with the router. does plugging the router into the ISA server slow down network traffic? can the ISA server handle all the router traffic?

 

[lovalles]

connecting the router to the isa server will speed up your network, because youll be using NAT, that means that only the packed the ISA clients needs will be sent.