ISA blocking pings

[jshepherd]

I have an ISA 2000 servr with an exchange server sitting inside on a private IP address. All works fine. I’m upgrading to ISA 2004 but when I change the gateway address of the exchange server to that of the ISA 2004, the mail server can’t ping in either ip address or FQDN.

I have a rule allowing all outbound traffic from the exchange server’s ip address to the external internet but the server still can’t get outside. I know the problem is probably very simple but I just can’t see it.

Any ideas?

John

 

[InfrArch]

If you have a correct rule, then check routing between ISA and Exch and Exch and ISA. The problem should be there...



Victor K (Microsoft Consulting Services)
MCSA/MCSE:Security & Messaging;CNE;CCSE+;CIWSP;CIWSA;Network+;CCNA;nCSE;CISSP

 

[jshepherd]

Hi and thanks for answering.

How do I check the routing? I'm not sure exactly what you mean but are you referring to the routing table?

John

 

[InfrArch]

Hi,

What do you mean by "I'm upgrading"? You do in-place upgrade or just introduce a parallel system?
Routing means the following:

1. Check Exch can ping ISA int. interface
2. Check ISA can ping some internet FQDN
3. Check DNS resolution works fine on Exch and ISA for public FQDNs
4. Check allowing rule (rules) are in place.

Good luck!



Victor K (Microsoft Consulting Services)
MCSA/MCSE:Security & Messaging;CNE;CCSE+;CIWSP;CIWSA;Network+;CCNA;nCSE;CISSP