OK, here is our config:

ISA Server 2006 EE (Evaluation copy)

2-server array

Each server has a copy of the CSS, with one being primary and the other
secondary.

Three interfaces on each server:

- Exterior LAN (NLB)

- Interior LAN (NLB)

- Dedicated Array Communication LAN

When we attempted to upgrade to licensed version, the installation failed
with the following message:

"Setup failed while registering ISA Server filters"

And the installation was backed out.

Setup file reads:

Action 18:28:35: RegisterFiltersCOM. Registering ISA Server filters...

MSI (s) (FC:30) [18:28:35:395]: Executing op:
CustomActionSchedule(Action=RegisterFiltersCOM,ActionType=25601,Source=BinaryData,Target=**********,CustomActionData=**********)

MSI (s) (FC:40) [18:28:35:395]: Invoking remote custom action. DLL:
C:\WINDOWS\Installer\MSI2A.tmp, Entrypoint: RegisterFiltersCOM

Hi

I am new to ISA server I just want to know how to configure NLB FAIL over in
ISA server 2006.

Thanks
AshokVikram

Cisco ASA 5510. Outside NIC connected to ISP with real internet IP
addresses. Inside NIC connected to DMZ 172.17.193.0/24 with address
172.17.193.100.

Brand new clean ISA 2006 SP1. Outside NIC connected to 172.17.193.0/24
DMZ with address 172.17.193.1. Inside NIC connected to UAT
44.44.44.0/24 with address 44.44.44.109.

VPN user connects to the ASA (gets a 192.168.20.0/24 IP address). On
the ASA, there is a route to 44.44.44.0/24 using 172.17.193.1 as the
gateway.

On the ISA, I've allowed all outbound connections from internal and
local host to external...so surfing the internet from a 44.44.44.x
server works fine.

I created a rule, where I allow RDC from external to local host
(ISA). That works fine for VPN users. Same with a PING rule from
external to local host (ISA).

But when I try to create a rule to allow either RDC or PING from
external (VPN users) to internal (any 44.44.44.x servers), it doesn't
work. I'm getting (for PING):

Hello,

I have a ISASERVER 2006 SP1 front of a network that only use for certain
services. Behind this ISASERVER, there are 2 servers, with its external and
internal IP.

ISASERVER -> External IAS: 80.58.x.10 ** Internal IAS: 10.1.0.1
SRVWEB01 -> External IAS: 80.58.x.1 ** Internal IAS: 10.58.0.1
SRVWEB02 -> External IAS: 80.58.x.2 ** Internal IAS: 10.58.0.2

Is that a customer can manage external server SRVWEB01 by Terminal Server
(80.58.x.1) as well as other customer can manage the same way the SRVWEB02
(80.58.x.2)

Both SRVWEB01/02 each have a website that also needs to publish.

I will be able to help conig these rules in the ISA?

Thanks companions.

Hello,

I have ISA2004 and 6. All the company users use 2003 Server RDP inhouse and
some use RDP out of house. I need to restrict users allowed to access RDP
from out of house to a certain group. I guess I will need to authenticate
users that connect to ISA and validate their access rights prior to passing
them on to the RDP server.

Any Ideas on how to do this?

Thanks,
Robert

I need help understanding if there is a more general way to bypass the proxy
server for local servers or URLs that doesn't involve the "Exceptions" list
in MSIE.

We have the Connections settings for MSIE 7 on a local computer set to:

1) UNselect Automatic Configuration (just to test)

2) Select proxy, with the gateway/ISA IP as the proxy address

3) Select the "Bypass proxy server for local Intranet addresses"

After reading Microsoft's documentation, that "Bypass proxy server" checkbox
apparently means nothing more than just test if the URL is going to a
hostname and NOT an IP or FQDN.

So these will bypass the proxy:

http://fred
http://foo

But these will NOT bypass the proxy:

http://fred.domain.com
http://foo.domain.com
http://127.0.0.1
http://199.99.99.99 //where this is the LOCAL Computer's IP!

Our ISA 2004 has one outside NIC and one inside NIC. Right now, there
are two domains on the inside network: UAT and DMZ.

I'd like to get the ISA move from the UAT to the DMZ domain. If I
just do a simple domain change on the ISA, are there any consequences
I should expect?

Any changes I should make after the domain change?

Hello,

I'm trying to set up a rule on my ISA 2000 box to allow traffic to a
URL on a non-standard HTTP port (8010), but I keep getting thew
following error:

10061 - Connection refused Internet Security and Acceleration Server

Background: The server you are attempting to access has refused the
connection with the gateway. This ususally results from trying to
connect to a service that is inactive on the server.

I've created a destination set that is correct and a rule to allow
HTTP from any request. I've also added the port into the protocol
rules.

I've tried the site by bypassing the ISA server with no problems.
Sorry I cxan't give out the URL.

Cheers

Hello,

I'm trying to set up a rule on my ISA 2000 box to allow traffic to a
URL on a non-standard HTTP port (8010), but I keep getting thew
following error:

10061 - Connection refused Internet Security and Acceleration Server

Background: The server you are attempting to access has refused the
connection with the gateway. This ususally results from trying to
connect to a service that is inactive on the server.

I've created a destination set that is correct and a rule to allow
HTTP from any request. I've also added the port into the protocol
rules.

I've tried the site by bypassing the ISA server with no problems.
Sorry I cxan't give out the URL.

Cheers

Hi. I'm looking for an ISA add-on program that makes keyword
filtering. For example i want to enter three keywords like
online,game,java. When it finds the three words in a page it will
block the page. i found a program about this but it supports ISA
Server 2000(Smash WebScum with LanGuard for Isa Server). i am loooking
for an add-on program that supports Isa 2004 or Isa 2006.