Re: PC Anywhere Traffic

From: Phillip Windell (_at_.)
Date: 02/17/05

  • Next message: Phillip Windell: "Re: PC Anywhere Traffic" 
    Date: Thu, 17 Feb 2005 12:17:23 -0600

    You don't "open ports" with ISA,..it doesn't work that way.
    Even if you did do it that way, that is not going to make an internal
    machine runing on internal private addresses available to the public. How
    would someone out on the internet target a machine running a private IP#
    (say 192.168.5.2) and expect to route to it? How would it know where to
    route when there are tens of thousands (hundreds of thousands?) of machines
    around the world using that same IP#?

    It requires the Publishing features of ISA. You Publish the PCA Host using
    the innermost ISA which Publishes it to the external Nic of that inner ISA.
    You then use the outer ISA to Publish the inner ISA *as if* it was the PCA
    Host. In my opinion this is a "lousey" situation, and I know that I
    wouldn't even know how to perform it exactly correct.

    The right way to do this is via VPN. But with a "two ISA" Back-to-Back DMZ,
    setting up the VPN would be a real hassle. You may need to run one VPN
    Tunnel inside a second VPN Tunnel. Go to www.isaserver.org and do a search
    with the key words DMZ and VPN and look for the article on the
    "Back-to-Back" scenerio. 

    -- 
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com
"Mike Cave" <MikeCave@discussions.microsoft.com> wrote in message
news:5B802B42-042F-43A0-A761-04C525753A66@microsoft.com...
> Guys, I have a vendor that's in Idaho that needs access to a PC Anywhere
box
> internally. Our network consist of a back to back ISA firewalls so the
client
> needs ports open through both firewalls. I did exactly as Cyskon article
said
> according to this. I look at the ISA logs on the front gate and it's
blocking
> ports 5631. Is there something I'm forgetting here?
>
>
"http://www.isaserver.org/tutorials/Publishing_a_host_using_PCAnywhere_behin
d_ISA.html">http://www.isaserver.org/tutorials/Publishing_a_host_using_PCAny
where_behind_ISA.html</a>
>
> Thanks,
>
> Michael
>
>
>
> "Mike Cave" wrote:
>
> > Thanks alot Cyskon!!!!
> >
> > "Cyskon" wrote:
> >
> > > <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
> > > <html>
> > > <head>
> > >   <meta content="text/html;charset=ISO-8859-1"
http-equiv="Content-Type">
> > >   <title></title>
> > > </head>
> > > <body bgcolor="#ffffff" text="#000000">
> > > <font face="Garamond">Thanks Dave.</font><br>
> > > <br>
> > > David Dixon wrote:
> > > <blockquote cite="mideFK$zcR3EHA.2288@TK2MSFTNGP11.phx.gbl"
type="cite">
> > >   <pre wrap="">Try this, but with you being the remote you would have
to make the inbound
> > > an outbound.
> > >
> > > <a class="moz-txt-link-freetext"
href="http://www.isaserver.org/tutorials/Publishing_a_host_using_PCAnywhere_
behind_ISA.html">http://www.isaserver.org/tutorials/Publishing_a_host_using_
PCAnywhere_behind_ISA.html</a>
> > >
> > >   </pre>
> > > </blockquote>
> > > </body>
> > > </html>
> > >
  • Next message: Phillip Windell: "Re: PC Anywhere Traffic"

    Relevant Pages

    • RE: Configuring ISA 2004 for outbound MS VPN access
      ... internal users to connect to an external VPN server through Microsoft ... Internet Security and Acceleration (ISA) Server 2004. ... remote VPN network is not in the local ISA server's LAT (for ISA 2004, ... Joining Networks over the Internet with a Gateway to Gateway VPN: ...
      (microsoft.public.windows.server.sbs)
    • Re: PC Anywhere Traffic
      ... You don't "open ports" with ISA,..it doesn't work that way. ... would someone out on the internet target a machine running a private IP# ... It requires the Publishing features of ISA. ... You may need to run one VPN ...
      (microsoft.public.isa)
    • Re: PC Anywhere Traffic
      ... You don't "open ports" with ISA,..it doesn't work that way. ... would someone out on the internet target a machine running a private IP# ... It requires the Publishing features of ISA. ... You may need to run one VPN ...
      (microsoft.public.isa.configuration)
    • Re: PC Anywhere Traffic
      ... You don't "open ports" with ISA,..it doesn't work that way. ... would someone out on the internet target a machine running a private IP# ... It requires the Publishing features of ISA. ... You may need to run one VPN ...
      (microsoft.public.isa.publishing)
    • Re: weird gateway to gateway vpn issue
      ... but then the vpn ... web sites from site B I have to disconnect the gateway to gateway ... has a domain controller that connects over the internet through ... to the internet through their local ISA server at any one time. ...
      (microsoft.public.isa.vpn)