How to Enable Internet Control Message Protocol Proxy PING Requests (274568)


The information in this article applies to:

  • Microsoft Internet Security and Acceleration Server 2000
This article was previously published under Q274568

SUMMARY

Microsoft Internet Security and Acceleration (ISA) Server secure network address translation (SecureNAT) is able to pass Internet Control Message Protocol (ICMP) packets between internal and external hosts. However, this feature is not enabled by default.

In ISA Server, ICMP proxying is enabled only if Internet Protocol (IP) routing is enabled and there is a corresponding packet filter under "IP Packet Filters" which enables ICMP packets to leave the external adapter and subsequent replies to be received. A filter for PING protocol requests exists in the default ISA Server installation package.

MORE INFORMATION

To enable internal computers to use the PING protocol to check the presence of hosts on the external network, you need to enable IP routing. This can be done by performing the following steps:
  1. Open the ISA Server Management user interface (UI).
  2. Open the Array or Server node of the applicable server.
  3. Open the Access Policy node.
  4. Right-click the IP Packet Filters folder and click Properties.
  5. On the General tab, select the option to enable IP routing.

Modification Type:MinorLast Reviewed:1/15/2006
Keywords:kbenv kbhowto KB274568
©2004 Microsoft Corporation. All rights reserved.