| Microsoft Internet Security and Acceleration Server 2000 |
Gets or sets whether Internet Protocol (IP) routing is enabled.
Note It is not recommended to enable IP routing without enabling packet filtering.
When you enable packet filtering on Microsoft Internet Security and Acceleration (ISA) Server, all packets on the external interface are dropped unless they are explicitly allowed, either statically, by Internet Protocol (IP) packet filters, or dynamically, by access policy or publishing rules.
The opposite scenario is configured when you enable routing on ISA Server without enabling packet filtering. In that case, ISA Server simply routes all traffic between the Internet and your corporate network. In other words, ISA Server acts as a router, a device that connects disjointed networks by forwarding packets between them. This is not a recommended scenario for ISA Server.
By enabling both packet filtering and routing, you enjoy the benefits of strict policy enforcement at the packet filter level, as well as routing capabilities for secondary connections. It is recommended that you enable filtering and routing on ISA Server, since this combines the security of packet filtering with the performance enhancement of routing.
FPCIpPacketFilters.IpRoutingEnabled [ = bEnabled ]
HRESULT get_IpRoutingEnabled( VARIANT_BOOL *pbEnabled ); HRESULT put_IpRoutingEnabled( VARIANT_BOOL bEnabled );
The property is read-write.