ISA and SQL2000

From: Scott (Scott_at_discussions.microsoft.com)
Date: 12/23/04 

Date: Thu, 23 Dec 2004 06:19:02 -0800

Hi experts,
 I am new to ISA 2004 and have a wierd problem I need assistance with
solving. My company developed software years ago that required port 1433
(SQL) to be open to the Internet. Back in the day it wasnt as big an issue as
it is now but I cannot close this port. (Just for the record, we use the same
server/software internally on a LAN segment)

We currently have a Cisco PIX doing NAT translantion across our network.
Unfortunately, this doesnt stop the direct pipe into the SQL server on port
1433. I would like to place an ISA server in a DMZ (or perimeter in front of
the SQL server) and have the ISA listen on port 1433 and possibly redirect
the requests internally to the SQL Server (which will not be exposed to the
Internet). Is this possible? If so, what steps would you recomend I use to
get started?

On a related note, I run a Event Log Manager that alerts me of 1000+
attempts to log onto my SQL Server from the Internet due to the exposed port.
Would this be stopped if ISA is in front of the SQL server?

BTW, I just ordered Tom's book... I cant wait to dig in!

Regards,

Scott

Relevant Pages

  • Re: SharePoint 3.0: problems with external access
    ... Create a new certificate for the WSS 3.0 website? ... "Go to 'Alternate Access Mappings' and in the 'Internet Zone' for your ... Port 443 won't work because it is already used by the Default Web Site. ... What you need to do is create a wildcard certificate and use it in ISA. ...
    (microsoft.public.windows.server.sbs)
  • Re: SBSServer processes Port 80 blocked
    ... ISA rules will apply anyway. ... I've found that certain Windows apps don't work properly because they get ... What does it mean to send over port 80? ... He is in the BackOffice internet ...
    (microsoft.public.backoffice.smallbiz2000)
  • Re: SharePoint 3.0: problems with external access
    ... "Go to 'Alternate Access Mappings' and in the 'Internet Zone' for your ... Port 443 won't work because it is already used by the Default Web Site. ... What you need to do is create a wildcard certificate and use it in ISA. ... The steps to publish WSS 3.0 applications behind ISA 2004 are the same ...
    (microsoft.public.windows.server.sbs)
  • Re: port forwarding (rerouting) with isa server.
    ... This is a problem for portable users which have to access the isa ... > server from within the internal network aswell from the internet. ... > exteral ip of the router), but as i told it is a problem with portable ... >>> I have a question about port forwarding with isa server. ...
    (microsoft.public.isa)
  • ISA und OWA: Zugriff von außen
    ... auf unserem Server läuft SBS2000, also auch IIS5, ISA und Exchange. ... und mit fester öffentlicher IP) ans Internet angeschlossen. ... und wird vom ISA an Port 81 überbrückt. ...
    (microsoft.public.de.german.isaserver)