Enabling Dial-Out Access ISA Winsock Proxy, Firewall, and SecureNAT Clients

This article describes how to enable dial-out access on the following Microsoft Internet Security and Acceleration Server 2000 (ISA) clients:

• Winsock Proxy
• Firewall
• SecureNAT

For ISA to use a modem, or virtual-private-network (VPN) connection to make connections to an upstream network, you need to enable this in the Network Configuration section of the ISA Management Console. This requires a different configuration in addition to what is necessary to satisfy Web Proxy requests.

To use a modem, or VPN connection as a primary connection for Firewall, Winsock Proxy, or SecureNAT clients by using the ISA Management Console, follow these steps:

1. Create a Dial-up connection on the server under Windows 2000 Network and Dial-up connections. If the server is in an array, create Dial-up Networking (DUN) entries with identical names on all servers in the array.
2. In the ISA Management Console, create a Dial-up Entry under servername, and then Policies Elements - Dial-up Entries.
3. Right-click Network Configuration in the ISA Management Console, and then click Properties.
4. Click Use primary connection, and then click Use dial-up Entry.

Note: If you do not click to select the Use dial-up entry check box in the ISA Management Console, even if you manually establish a DUN connection to a network provider, ISA SecureNAT, or Winsock Proxy will not correctly forward packets, even if HTTP, and SHTTP are proxied correctly.

For additional information about how to enable PPTP clients to connect through an ISA firewall, click the article number below to view the article in the Microsoft Knowledge Base: