Re: SBS 2003 ISA proxy for FTP fails

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: David Barnes (david_at_nospam-bitsolve.com)
Date: 08/12/04 

Date: Thu, 12 Aug 2004 22:58:39 GMT

That's all very well, but that doesn't fit my requirements.
MS Proxy 2.0 did a better job of proxy than this.

If I get what you are saying correct; ISA is no longer a standard CERN 1.1
compliant PROXY with windows extensions (as Proxy 2.0 was).

How do I install this on my clients Xerox printer, or their Apple MAC's?
I need standard FTP(Read) proxy capability.
If ISA can't do this I'll have to use something else.

If I have to use Wingate, do I have to make some changes to ISA?
Or do I just set Wingate to proxy on another port eg 8081

David

"Marina Roos [SBS-MVP]" <marina@roos.nodontwantspam.nl.com> wrote in message
news:OetFm2yfEHA.2896@TK2MSFTNGP11.phx.gbl...
> Hi David,
>
> Because that is the way ISA works ;-) Install the Firewall Client on the
> workstations and set the proxy to your server and port 8080.
>
> --
> Regards,
>
> Marina
> Microsoft SBS-MVP
>
> "David Barnes" <david@nospam-bitsolve.com> schreef in bericht
> news:2jcSc.3078$Bt5.32541818@news-text.cableinet.net...
> > Hi Marina,
> >
> > Why is the firewall client required for FTP proxy access via SBS's ISA?
> > I have some non-windows systems (printers linux etc..) that I also want
to
> > get this working for..
> > Can't install firewall client on a minolta printer..!
> >
> > Apart from that I don't really want to install the firewallclient on the
> > PC's I want to use the proxy server as a proxy..
> > I can get Wingate to work, why can't I get ISA to work for FTP(Read)
> proxy.?
> >
> > David
> >
> >
> > "Marina Roos [SBS-MVP]" <marina@roos.nodontwantspam.nl.com> wrote in
> message
> > news:uKj2XlOeEHA.3016@tk2msftngp13.phx.gbl...
> > > Hi David,
> > >
> > > Make sure the Firewall client is installed on the clients. Proxy
should
> > > point to your server and port 8080.
> > >
> > > --
> > > Regards,
> > >
> > > Marina
> > > Microsoft SBS-MVP
> > >
> > > "David Barnes" <david@nospam-bitsolve.com> schreef in bericht
> > > news:i8APc.236$Jw6.1926354@news-text.cableinet.net...
> > > > I'm stuck..
> > > >
> > > > Start again and ask the question properly this time...
> > > >
> > > > SBS2003 (premium)
> > > > 2 NICs
> > > > 'out of the tin' default settings
> > > > SBS's 'CEICW' run and selected 'directly connected' and 'enable
> > firewall'
> > > > Servers connection to the internet is via a NAT/PAT firewall/router
> > > > (FireBrick to be precise)
> > > >
> > > > NOTE1: ISA is pre-configured by the SBS setup with filters etc..
> > > >
> > > > From the SBS server itself I couldn't do any FTP access to any site
at
> > > all,
> > > > from IE or the 'CMD> FTP' until I enabled the outbound port 21 and
> > inbound
> > > > port 20 filters that were there but disabled(why?) and created an
> > > additional
> > > > filter 'outbound, tcp, local=dynamic, remote=any'.
> > > >
> > > > Q1) Why didn't this 'work out of the tin'?
> > > > Q1a) Is there an SBS wizard I should be running to fix this?
> > > > Q1b) Is there a patch from MS for this?
> > > > NOTE2: This should work out of the tin as MS market and sell SBS as
a
> > > > pre-configured solution for small businesses..
> > > >
> > > > At least I can get the server to ftp download the virus updates
now..
> > > >
> > > > HOWEVER...
> > > >
> > > > on a client PC (in IE) goto ftp://ftp.hp.com .. fails and I get:
> > > > ISA Server: Extended error message:
> > > > 200 type set to A.
> > > > 500 Invalid PORT Command.
> > > >
> > > > NOTE3: the error returned to the client is an SBS/ISA error page..
> > > > Client has NO default gateway
> > > > Client has ISA(SBS) server defined as proxy for FTP
> > > > Client does NOT have proxy firewall installed.
> > > >
> > > > Note: ftp.hp.com is just an example, also tried ftp.microsoft.com
and
> > > > ftp.nai.com..
> > > >
> > > > Q2) How do I get the Proxy FTP(read) to work?
> > > > Q2a)What SBS wizard/setting do I have to run to enable this?
> > > > Q2b) How do I diagnose it's failing?
> > > >
> > > >
> > > >
> > > > David Barnes
> > > >
> > > >
> > >
> > >
> >
> >
>
>

Relevant Pages

  • Re: ISA 2004 and Real Player
    ... We found that installing Firewall client allowed streaming media through ISA ... that Websense traps web proxy requests, ...
    (microsoft.public.isa.configuration)
  • Re: ISA server 2004 and Bluecoat proxy
    ... i want to mention that we have configured a backup rout (backup bluecoat ... i want to ask about event 14130 that related to web proxy chain fauilire. ... If you were able to work around the upstream proxy server, ... upstream ISA Server, you might want to change it back. ...
    (microsoft.public.isa.configuration)
  • Re: SBS2003 with 1 NIC: Need just Proxy portion of ISA - how?
    ... the firewall client software installed on each workstation. ... ISA 2000 now and want to install ISA 2004 later, ... BEFORE you install ISA 2004 on the SBS server. ... the Proxy vs Firewall components? ...
    (microsoft.public.windows.server.sbs)
  • Re: ISA 2000 and Frontpage publishing
    ... Not sure I understand the firewall vs proxy question, ... I thought ISA was both - ISA 2000 is the firewall on my network perimeter, ... My IE proxy settings for outbound trafffic are routed through the ISA box. ... I am using FW client on the workstation in question, ...
    (microsoft.public.isa)
  • Re: Site2Site VPN - Web page requests returns FWX_E_TERMINATING
    ... have?Firewall client or Web proxy clients?If you are using FWC is normal ... to use proxy locally and create an exception for your web site. ... in them,...this causes them to be interpreted by Internet ... Understanding the ISA 2004 Access Rule Processing ...
    (microsoft.public.isa.vpn)