Guide to ISA Setup

[extrememc]

Hello to all. I am looking for a good guide on setting up isa for the first time. I would like to be able to cache websites. If anyone now of a good guide out there place let me know.

 

[dput]

There is a lot of usefull information at

http://www.isaserver.org/

Dan

 

[buddafish]

Configuring ISA Server 2000 (2004 ?) Snygress Publishing..
and isaserver.org as mentioned above...

 

[bofhrevenge2]

Hope you don't mind me jumping in.

I am finding conflicting info on setting up ISA 2004, some docs tell me to configure the firewall to allow the DHCP server on ISA so that clients can collect IP info. I already have a DHCP server on my Active Directory network that I really don't want to disturb, do I have to install DHCP on the ISA box or can i continue with my own?

Thanks.

 

[bofhrevenge2]

Also we have a trusted DNS server on our WAN that I want our internal DNS server to forward requests to (it does currently but we're about to put ISA in between), can I set the firewall to allow this or do I "have" to install a caching only DNS server on the ISA box for my DNS server to forward requests too.

Thanks.

 

[dearingkr]

ISA will use your existing DHCP server.

As long as outbound DNS queries (port 53 I think?) are allowed, it will work fine. If you leave the default outbound rule in place, it will allow it.

MCSE CCNA CCDA

 

[bofhrevenge2]

Excellent i've had quite a bit of success so far, i've created a few policies e.g. HTTP and POP filtering. The problem i'm now having is making the user groups feature work, my policies work for 'All Users' but if i try to add a group e.g. 'Email Users' and remove 'all users' it fails.

Does it require the firewall client to use these features?

Thanks.

 

[dearingkr]

Assumptions:
1. you have ISA running on a member server of a domain running active directory.
2. you're using AD's groups.
3. you have ISA SP1 installed

I haven't had any problems using groups to restrict access, etc. I have noticed that I sometimes have to restart the services for changes to take effect.

Are you getting any errors in the event log?

MCSE CCNA CCDA

 

[bofhrevenge2]

My appoligies.

I'm in a 2003 AD domain and the ISA is a member server running ISA 2004. I've setup DNS now and it works fine.

I don't receive any errors it's odd the rules work fine if i include all users i can turn protocols on and off at will, the problem is that as soon as i add another group and remove all users then noone can access the internet. Does it require the firewall client to be installed?

Thanks.