Too Many Groups for the Firewall Client

Have you even had a problem with Firewall client connections where the user wasn’t able to connect to sites, or even some sites? You tried to run down the problem, and it seemed to affect some users and not others? Those kind of problems are very difficult to troubleshoot, since you figure it must be a problem with the client configuration, since it’s not affecting all users.

Unfortunately, things don’t always work that way. The problem could actually be related to the user, and not the client machine!

How? Maybe the user belongs to too many groups, and you’re using group based access control on the ISA firewall for strong outbound access control. There’s one situation where it’s the user that’s the problem, and not the client computer.

Yuri Diogenes describes how this can be a problem in his blog over at

http://blogs.technet.com/yuridiogenes/archive/2009/05/12/firewall-client-error-when-browsing-a-web-site.aspx

HTH,

Tom

Thomas W Shinder, M.D., MCSE
Sr. Consultant / Technical Writer

image
Prowess Consulting www.prowessconsulting.com

PROWESS CONSULTING | Microsoft Forefront Security Specialist
Email: [email protected]
MVP — Forefront Edge Security (ISA/TMG/IAG

Leave a Comment

Your email address will not be published.

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Scroll to Top