Windows Server

BruceB · Guest

We're trying to setup a new web based product Agencyware. It is web based
but starts from a small pc based application. It won't launch the web site
from either the SBS2000 environment or my own SBS2003 environment. When I
take the application and run on my notebook outside the firewall it launches
fine.

ISA is implemented on both systems in standard fashion allowing OWA, TS etc.
from the ICWizard.

Note sure where to look or what questions to ask. Appreciate any hints

Edward Tian · Guest

Hi Bruce:
Thank you for posting here.

According to the post, I understand that Agencyware software won't be able
to access web in your ISA based environment but it works outside the
firewall. If I have misunderstood your concern, please feel free to let me
know.
The problem could be related to the authentication. I suggest you disable
the web authentication on ISA.
You can do the steps below:

1. Make sure you have IP Routing enabled. In the ISA Management Console,
View the properties of the IP Packet Filters Container. Place a Check Mark
in the option to "Enable packet filtering", and another in "Enable IP
routing".

2. Create a Client Address Set to allow Clients out through SNAT. Expand
Policy Elements. Select Client Address Sets. Select "Create a Client Set".
For the Name let's use "SNAT Clients". Click ADD and type in the IP
addresses or range of addresses that will be ALLOWED to use SNAT of the
computers. Click OK.

3. Create a Protocol Rule to allow SNAT Clients to pass through the
Firewall. Expand Access Policy. Select Protocol Rules. Select "Create a
Protocol Rule". Let's use "SNAT Rule" for the name. Click NEXT until you
get to the sheet entitled "Client Type". Select "Specific Computers (client
address sets), click Next. Click ADD. Select the "SNAT Clients" we created
earlier and click "Add ". Click OK, Click Next, Click Finish. Stop and
Start all ISA related Services.

4. Open the ISA Server Management, right click the ISA Server Name, and
then select 'Properties'. In the Outgoing Web Requests tab, disable the
'Ask unauthorized users for identifications' option.

5. Open the ISA Server Management, expand Access Policy. Select Site and
Content Rules. Select "New"->" Rule..". Create a Site and Content allow
rule.

Hope this helps, please try the above and then let me know the results. I
look forward to hearing from you.
If you have anything unclear or problem still persists, please feel free to
let me know, I'm glad to be of the assistance.
Have a nice weekend!

Best Regards:
Edward Tian

BruceB · Guest

Thanks Edward for the descriptive notes. This worked and the app is up and
running. I should know better than to spend large amounts of time trying
things. Next time I'll post the question first. Again Great Job!

Bruce

Edward Tian · Guest

Hi Bruce:
I'm glad to hear that the problem has been resolved. It''s my pleasure to
work with you. If you have any other questions, please feel free to let me
know. I hope to see you again in the newsgroup.
Have a good day!

Best Regards:
Edward Tian

ericbech · Joined: 04 Apr 2006 Posts: 1

I'm having a similar issue with ISA 2004 and the UI to do this has changed. Could you give me the steps for ISA 2004.

Thanks,

Eric

	Windows Server Forum Index -> Small Business Server 2003	All times are GMT
Page 1 of 1