Microsoft KB Archive/838251

= How to enable ICMP traffic from protected SecureNet clients to external hosts in ISA Server 2006 and ISA Server 2004 =

Article ID: 838251

Article Last Modified on 12/4/2007

-

APPLIES TO


 * Microsoft Internet Security and Acceleration Server 2004 Standard Edition
 * Microsoft Internet Security and Acceleration Server 2004 Enterprise Edition
 * Microsoft Internet Security and Acceleration Server 2006 Standard Edition
 * Microsoft Internet Security and Acceleration Server 2006 Enterprise Edition

-



INTRODUCTION
This article describes how to enable ICMP traffic from protected SecureNet clients to external hosts in Microsoft Internet Security and Acceleration (ISA) Server 2006 and in Microsoft ISA Server 2004.



MORE INFORMATION
ISA Server does not pass ICMP traffic from protected SecureNet clients without a firewall policy that is configured to let ICMP traffic to pass through the ISA Server. ISA Server cannot pass ICMP traffic from non-SecureNet clients.

You must have a firewall policy that permits the ISA Server computer to send and receive Internet Control Message Protocol (ICMP) packets. Additionally, you must enable Internet Protocol (IP) routing on the ISA Sever computer.

To enable IP routing in ISA Server 2004, follow these steps:
 * 1) Click Start, point to Programs, point to Microsoft ISA Server, and then click ISA Server Management.
 * 2) In the ISA Server Management console tree, expand , where   is the name of the ISA Server that you want to configure.

Note For ISA Server 2004, Enterprise Edition, expand Microsoft Internet Security and Acceleration Server 2004, expand Arrays, and then expand.
 * 1) Expand Configuration, and then click General.
 * 2) In the details pane, click Define IP Preferences under Additional Security Policy.
 * 3) In IP Preferences, click the IP Routing tab.
 * 4) Make sure that the Enable IP routing check box is selected, and then click OK.

Note By default, the Enable IP routing check box is selected.

To enable IP routing in ISA Server 2006, follow these steps:
 * 1) Click Start, point to All Programs, point to Microsoft ISA Server, and then click ISA Server Management.
 * 2) Expand Microsoft Internet Security and Acceleration Server 2006, expand Server _Name, expand Configuration, and then expand General.

Note For ISA Server 2006 Enterprise Edition, expand Microsoft Internet Security and Acceleration Server 2006, expand Arrays, expand, and then expand Configuration.
 * 1) In the details pane, click Configure IP Protection.
 * 2) Click the IP Routing tab, click to select the Enable IP routing check box, and then click OK.

Keywords: kbinfo kbisa2006swept KB838251

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.