Microsoft KB Archive/841665

= A network address translation IP address may be used for all outgoing network traffic on an ISA Server 2004 computer =

PSS ID Number: 841665

Article Last Modified on 9/24/2004

-

The information in this article applies to:


 * Microsoft Internet Security and Acceleration Server 2004, Standard Edition

-





SYMPTOMS
When you configure network address translation (NAT) on a computer that has Microsoft Internet Security and Acceleration (ISA) Server 2004 installed, the IP address for NAT may be used for all outgoing network traffic on the computer.

This issue may cause an IP address that you do not want to use externally to be visible on the Internet.



CAUSE
This issue may occur when you bind multiple IP addresses to the externally facing network adaptor of the ISA Server computer.

When you bind multiple IP addresses to the external network adaptor of the ISA Server computer, ISA Server 2004 will use the first bound IP address in the binding order list. This behavior may cause an inappropriate IP address to be visible externally.



WORKAROUND
To work around this issue, change the IP address binding order of the externally facing network adaptor so that the IP address you want to use is first in the binding order list.

For example, to change the binding order of IP addresses in Microsoft Windows Server 2003, follow these steps:
 * 1) Click Start, point to Control Panel, and then double-click Network Connections.
 * 2) In Network Connections, right-click the external network adaptor, and then click Properties.
 * 3) Click to select Internet Protocol (TCP/IP), and then click Properties.
 * 4) In Internet Protocol (TCP/IP) properties, click Advanced, and then click the IP Settings tab.
 * 5) Use the Add and Remove buttons to arrange the IP addresses in the order that you want.

Note Remember that the first IP address on the list will be used by ISA Server 2004. Write down the IP addresses before you delete them so that you can add the IP address back to the list.



STATUS
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the &quot;Applies to&quot; section.



MORE INFORMATION
For more information about ISA Server 2004, visit the following Microsoft Web site.

http://www.microsoft.com/isaserver

Keywords: kbtshoot kbprb KB841665

Technology: kbAudITPro kbISAS2004Search kbISAS2004Std kbISAServSearch

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© 2004 Microsoft Corporation. All rights reserved.