The following Frequently Asked Questions, answered by the authors of this book, are designed to both measure your understanding of the concepts presented in this chapter and to assist you with real-life implementation of these concepts. To have your questions about this chapter answered by the author, browse to www.syngress.com/solutions and click on the Ask the Author form. You will also gain access to thousands of other FAQs at ITFAQnet.com.

Q: My clients on the corporate Network are able to connect to all Web sites except the Web sites we manage on our Internal network. What s up with that?

A: The most likely reason for this problem is that your corporate network clients are attempting to access the Web sites by looping back through the ISA firewall. You can correct this problem by configuring the Web Proxy and Firewall clients to use direct access for internal IP addresses and domains, and to configuring a split DNS so that internal network hosts resolve names for internal resources to their internal IP addresses.

Q: I have two interfaces on my ISA firewall: one interface connected to the Internet and one interface connected to the corporate network. There are five network IDs managed by a router on the corporate network. I created four internal Networks for the network IDs that weren t covered by the default Internal network. Now I m seeing errors on my ISA firewall indicating that my other Internal Networks are not reachable from the Internal Network interface. What gives?

A: All...