Clicky

I am a Web Proxy client. When I open IE and access a URL, there are three sessions appearing. My gateway is not the ISA server. Why there is a SecureNAT session ?
Why there is no "Client Username" of a SecureNAT session? Can I disable SecureNAT on the ISA server ?

asked 11/22/2011 11:01

AaronZHU's gravatar image

AaronZHU ♦♦


13 Answers:
Do you have the ISA firewall client installed?
link

answered

keith_alabaster's gravatar image

keith_alabaster

I have FW Client installed. But I disabled it (I disabled the service). It still shows SecurNAT session.
link

answered 2011-11-22 at 22:17:48

AaronZHU's gravatar image

AaronZHU

Why there is a SecureNAT session?

1. Because ISA/TMG is in the "routing path" to the Internet.  It doesn't have to be the Default Gateway, and would never be the Default Gateway on a multi-segment LAN

Why there is no "Client Username" of a SecureNAT session?

2. Because SecureNAT Clients do not, and cannot, authenticate,...therefore no user account information.

Can I disable SecureNAT on the ISA server?

3. No you cannot.

I have FW Client installed. But I disabled it (I disabled the service)

4. Then why did you install it?  If you don't want it, then don't install it.  If you install it, then use it.


link

answered 2011-11-22 at 23:00:14

pwindell's gravatar image

pwindell

You having a bad day Phil?
link

answered 2011-11-29 at 09:17:35

keith_alabaster's gravatar image

keith_alabaster

No.
I don't know why people always think that?  
Must be my flowery charm and sunny disposition :-)

Ok,..maybe a little bad.  It all started when I had to get out of bed,...and then got worse because I had to drive to work after just tolerating getting out of bed.
link

answered 2011-11-29 at 09:50:14

pwindell's gravatar image

pwindell

Thanks, Great, pwindell. Well, could you please answer my another open question ?
http://www.qa.downappz.com/Microsoft/Windows_Security/Q_27461409.html
link

answered 2011-11-29 at 09:59:00

AaronZHU's gravatar image

AaronZHU

Sulimanw already did.
link

answered 2011-12-04 at 21:00:18

pwindell's gravatar image

pwindell

The HTTP App Filter effectively "is" the Web Proxy Service.  Without it you are pretty much NAT'ing the traffic and passing it through a "web cache".  Now I was careful to say "effectively",...because it just isn't quite that clean and simple.  All the components of ISA/TMG are tightly integrated together and you just aren't going to find nice clean boundaries between them.  For example even the SecureNAT Clients can be passed through the web caching which is part of the Web Proxy Service even though they are not technically using the Web Proxy Service.
link

answered 2011-12-05 at 06:36:41

pwindell's gravatar image

pwindell

On the original question,...some web sites aren't 100% HTTP/HTTPS because of some of the Applets or maybe Flash or other things (who knows what) that may generate other types of traffic that aren't HTTP/HTTPS.  If the Firewall Client isn't installed then they would appear as SecureNAT traffic when you went to the site.
link

answered 2011-12-05 at 06:42:23

pwindell's gravatar image

pwindell

lol - :)
link

answered 2011-12-05 at 06:58:22

keith_alabaster's gravatar image

keith_alabaster

What I do now ...  :-]
link

answered 2011-12-05 at 10:00:50

pwindell's gravatar image

pwindell

You? Nothing mate :) I agree, the other question is already answered but you have a fan methinks <grins>
link

answered 2011-12-05 at 10:02:44

keith_alabaster's gravatar image

keith_alabaster

Doesn't hurt to have one of those I suppose :-)
link

answered 2011-12-05 at 10:03:54

pwindell's gravatar image

pwindell

Your answer
[hide preview]

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Tags:

×2
×2

Asked: 11/22/2011 11:01

Seen: 321 times

Last updated: 12/12/2011 08:42