How to maintain additional local address table entries for an ISA firewall client

This article describes how to maintain additional local address table entries for an Internet Security and Acceleration (ISA) firewall client.

The local address table

The Setup program for the Microsoft ISA Server 2000 firewall client installs an Msplat.txt file into a folder that you specify. By default, this file is located in the "%ProgramFiles%\Microsoft Firewall Client" folder or in the client software's previous installation folder.

The installer for the firewall client in Microsoft ISA Server 2004 and in Microsoft ISA Server 2006 uses the "%ProgramFiles%\Microsoft\Firewall Client 2004" folder. This installer does not use the same files as the ISA 2000 firewall client.

The Msplat.txt file contains the local address table. This file defines the IP addresses that the firewall client-enabled host can access directly. The ISA Server computer updates this data. Therefore, any changes that are made manually on the client side are overwritten during the next update. The ISA Server 2004 and ISA Server 2006 firewall client maintains the address table based on information that the client obtains from the ISA server itself.

In ISA Server 2004 and in ISA Server 2006, the updates occur every six hours unless the user initiates them. In some cases, the address list that the firewall client downloads from the ISA Server computer may not completely define addresses that a particular client can access directly.

For more information about how ISA Server 2006 stores local address table entries, visit the following Microsoft Web site:

The Locallat.txt file

You can add local addresses to a Locallat.txt file that you create. This file helps you maintain a separate list of IP addresses that the client should access directly. The Locallat.txt file should contain IP addresses in pairs. Each address pair defines either a range of IP addresses or a single IP address.

Example

The first entry is an IP address range and the second entry is a single IP address.

Note In the second entry, the second part of the pair is an IP address and not a subnet mask. On a computer that is running the ISA Server 2000 firewall client, the Locallat.txt file must be located in the "%ProgramFiles%\Microsoft Firewall Client" folder.

On computers that are running the ISA Server 2004 firewall client or the ISA Server 2006 firewall client, you can maintain this data for each computer or for each user.

To maintain this list for an individual user on a host computer that is running an operating system other than Windows Vista, the Locallat.txt file must be located in the following folder:To maintain this list for an individual user on a host computer that is running Windows Vista, the Locallat.txt file must be located in the following folder:To maintain this list for a particular computer on a host computer that is running an operating system other than Windows Vista, the Locallat.txt file must be located in the following folder:To maintain this list for a particular computer on a host computer that is running Windows Vista, the Locallat.txt file must be located in the following folder:

How to obtain the ISA Server firewall client for Windows Vista

Windows Vista requires an updated version of Firewall Client for ISA Server. For more information about the updated version of Firewall Client for ISA Server, click the following article number to view the article in the Microsoft Knowledge Base: