Changing network definition

[newbobbys9]

I have an ISA 2004 that is configured as a back end firewall. This is the configuration that I found and I have not changed it. The problem is that, as a firewall rather than a caching only, it is blocking RPC traffic. In turn, this prevents us from using authenticated access and thus I am not able to use AD features in Surf Control Web Filter. Is there a way to allow RPC traffic (and would this be a good idea?), or can I change the network configuration to caching only without a complete rebuild? Any ideas on this would be appreciated. Thanks.

 

[InfrArch]

Yes, it's easy. In ISA 2004 protocol definitions you have 2 definitions concerning RPC. Include those in the rule allowing access and will be fine.
Anyway, if you have connectiovity issue through ISA, first of all enable LIVE looging and see what is being blocked.



Victor K (Microsoft Consulting Services)
MCSA/MCSE:Security & Messaging;CNE;CCSE+;CIWSP;CIWSA;Network+;CCNA;nCSE;CISSP