Saturday, January 26, 2008

Unable to Ping ISA 2006

Hello Friends,

How are you all doing? good!!! ... hope everyone is enjoying here..

Ok, so your ISA 2006 is installed!! lets get started with it now. Here I will discuss 1st thing that made me confused when I installed ISA 2006 and that was "Unable to Ping" ISA server, wow!! that was something annoying for me.

Actually the best thing of ISA 2006 is it reject anything that comes to it from any network, yes from any network even if it is the same network in which ISA 2006 is installed. Well at 1st it will sound something stupid thing, but its a very good feature which you will like later as you keep digging in ISA. Image below will show you what exactly is the scenario.


Fine, lets go ahead and enable our Ping(ICMP) traffic to ISA 2006.

1. Open up your ISA 2006 Management console.
2. Select
"Firewall Policy" and in right side of window you will see "Tasks Bar"
3. Under tasks you will find
"System Policy Tasks"
4. Under this, click on
"Edit System Policy"
5. This will give you a new window
"System Policy Editor" which will have a list on left side and respective options on right.
6. Find "ICMP (ping)" in list on left, select it and you will get options related to it on right side.
You will have to see under "From" tab. This is the place where we need to tell ISA 2006 server to accept traffic coming from specific network.
7. Click on
"Add" button, this will give you a small window of "Network Entities".
8. 1st thing you will find is
"Networks".
9. Expand
"Networks" (click on + sign) and you will see all the networks that are defined by default in ISA 2006.
10. Now as we want
Ping (icmp) traffic from internal network to be accepted by ISA so we will select "Internal" and click on "Add" this will add Internal network definition to From tab, click close.

and click
Ok on System Policy Editor window.

Click on "Apply" which appears on yellow bar with warning symbol.
Click "OK" after settings are successfully applied.

Now try to ping from your internal network to ISA 2006. :-)

Hope you found this article helpful.

Regards,
Wasim.

No comments: