Announcement

Collapse
No announcement yet.

ISA 2006 - Scanning issue

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • ISA 2006 - Scanning issue

    I have a Windows Enterprise Server 2003 system running ISA server 2006. I also have a Minolta C350 Scanner/Copier all in one machine. It was working fine up until I recently installed the ISA server, now the problem I have is that when I try to scan something to it, it gives me a "folder not found" error. Up until now it has been scanning to a folder called "scans" on the hard drive. The permissions on the folder haven't changed, and I tried creating a firewall policy that allows everything and it still doesn't work... any suggestions would be greatly appeciated...???? Thanks.

  • #2
    Re: ISA 2006 - Scanning issue

    ISA should be a separate machine with no other roles then ISA server.
    Clearly you didn't do that. However if you want to keep the scanner "attached" to that machine I suggest you use the the monitoring to see what is getting blocked...

    Please note; all outbound traffic does not mean all traffic. It only allows all user defined and predefined ports...
    Marcel
    Technical Consultant
    Netherlands
    http://www.phetios.com
    http://blog.nessus.nl

    MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
    "No matter how secure, there is always the human factor."

    "Enjoy life today, tomorrow may never come."
    "If you're going through hell, keep going. ~Winston Churchill"

    Comment


    • #3
      Re: ISA 2006 - Scanning issue

      I appreciate the help, but we don't have the luxury of putting it on a separate machine. And I created a rule that allows all ports not just outgoing thru. The scanner reaches the server, it just doesn't write the file.

      Comment


      • #4
        Re: ISA 2006 - Scanning issue

        ISA doesn't harden the server or changing any file permissions by default so I've some doubts about it... Unless you have used the Security Configuration Wizard...
        I don't know what kind of rule you created but it should looks like: internal to local host allow some curtain ports... In the logging you can review which ports he is using. As an addition, any unknown ports request might be logged as Unidentified IP traffic.

        About the budget, security shouldn't be taken lightly. I don't know if you already have an firewall though which might create ISA obsolete, at least as a firewall. Is this machine performing any other roles or can the scanner be moved to an other server?
        Also note; ISA is supported to be virtualized...
        Marcel
        Technical Consultant
        Netherlands
        http://www.phetios.com
        http://blog.nessus.nl

        MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
        "No matter how secure, there is always the human factor."

        "Enjoy life today, tomorrow may never come."
        "If you're going through hell, keep going. ~Winston Churchill"

        Comment


        • #5
          Re: ISA 2006 - Scanning issue

          How does it access the folder? Directly via drive letter or via UNC path I.e. is it a shared folder? I'm pretty sure ISA itself doesn't uninstall the File and Printer Sharing Client from the Internal NIC, but if an ISA consultant installed the server and they knew what they were doing they would have configured the NICs first.

          As Dumber suggested, try a monitoring trace looking for denied traffic with the original client IP of the machine trying to scan. That should tell you what is getting blocked.
          BSc, MCSA: Server 2008, MCSE, MCSA: Messaging, MCTS
          sigpic
          Cruachan's Blog

          Comment

          Working...
          X