Rules and Client Sets

[syn666]

Im having a problem with the rules on our ISA server.
Our ISA server is setup in cache only mode.

At first we only had 1 rule, which was to allow access to any destination to users in the "Internet Access group", it worked fine.


We now have a new office over a WAN link and I want them to use our ISA server.
They are not part of our domain (they are setup in workgroup mode) so they cant be members of the "internet access group"
I want to give them access based on their IP address, so i created another rule (rule 2) that allows access to all destinations for a clients in subnet 192.168.X.X.



The problem im having is that the users over the WAN are getting prompted for user name and password, when i don't want them to.

can any one please help me out.

thanX

 

[dput]

Do you have authentication turned on? You would have to turn it off to avoid the prompt for user name and password.

Dan

 

[syn666]

If you are talking about authentication under the "outgoing web requests" on the properties page of the ISA, as the box is unticked.


what i want to do is:
Only give members of the global group "internet access" access to the net.This will only apply to the local domain in head office. (this is working fine)

And then i want every PC in our remote office to have access to the net, no matter what group they are in. (these are the people getting prompted for a password when i dont want them to)

does this make sense?

 

[zcolton]

Other than site and content rules, check what you have set for protocol rules.

 

[syn666]

Thats it!!!
thanks zcolton

I had to add another protocol rule for the interstate office and allow it based on client set

 

[zcolton]

glad to be of assistance