Re: Running OWA & RWW between two domains

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: daniel (daniel_at_nospampreferkosherkingsleynetworks.com)
Date: 01/18/05


Date: Tue, 18 Jan 2005 09:57:35 -0000

Sorry but I must have misunderstood, I thought you were trying to connect
from the ISA box itself where you need the filters etc.

Not sure about default install allowing those ports but if they're there
they're there.

connecting from a client machine behind the ISA shouldn't be an issue
providing you have the firewall client installed and the user has permission
to access the web.

Just check the basics first

make sure you can access regular internet sites from the client machine both
http&s
if thats no problem then it is likely to be a dns issue, your sbs box may be
caching the old ip of your dyndns box
ipconfig /flushdns check host file and dns server if running
test the publishing of the dyndns box from another network ie get a friend
to try it for you as well to rule this out.
also the error on the page will be helpful

"Richard Cass" <richardcass_AT_NO_SPAM_micronav.co.uk> wrote in message
news:ejyvJCU$EHA.3836@tk2msftngp13.phx.gbl...
> Daniel,
>
> Thanks for getting back, but I am not sure that I understand.
>
> I can only create these protocol rules and packet filters on the ISA
> featured SBS2003 server. I already had an outbound packet filter for port
> 4125 in ISA, and the default installation allows ports 80 & 433 outbound.
>
> From a client on the domain of the ISA SBS, I can ping the non-ISA SBS2003
> server dns name (which as I say uses dyndns.org), and from a client on the
> domain of the non-ISA server I can access OWA & Remote Web Workplace
> running on the same server.
>
> It is on a client behind the ISA that I cannot get to either http or https
> for these features on the non-ISA SBS.
>
> Richard
>
> "daniel" <daniel@nospampreferkosherkingsleynetworks.com> wrote in message
> news:%23Uik%23eS$EHA.1188@tk2msftngp13.phx.gbl...
>> you need to create outbound packet filter rules (also protocol
>> definitions and rules if they don't exist) for the perimeter hosts
>> (secure NAT client) as they do not behave the same way as the firewall
>> clients.
>>
>> the article you refer to assumes you get at least as far as the web page
>> so I don't think it will supply you with the complete answer.
>>
>> Check you can access the web from the ISA box first
>> both http/s
>>
>> If not then create protocol rules for http and https
>>
>> then create packet filters for 80 and 443
>>
>>
>>
>>
>>
>>
>> "Richard Cass" <richardcass_AT_NO_SPAM_micronav.co.uk> wrote in message
>> news:ujgYnwK$EHA.4072@TK2MSFTNGP10.phx.gbl...
>>>I have 2 domains - one with ISA and one without; the one without also
>>>uses dyndns.org to 'fix' my dns name.
>>> I have run CEICW to open the correct ports, and at the non-ISA server I
>>> can browse to the Internet URLs and it will allow me to perform the
>>> necessary actions. However, trying to remotely access the non-ISA server
>>> from the ISA featured server gives me a timeout if I use http:// or The
>>> page cannot be displayed There is a message using https://.
>>>
>>> I have folowed KB828053 using the option I believe is relevant, but this
>>> has no effect. The domain names and IP ranges are different between each
>>> server, and I am able to access the ISA server remotely.
>>>
>>> Am I missing a setting somewhere?
>>>
>>
>>
>
>



Relevant Pages

  • RE: sloww web browsing
    ... and ISA 2004, the internet access became slower than it used to be. ... Open the ISA Server management console, ... Click Start, point to Programs, point to Microsoft ISA server, and then ... will you be able to access the internet from the internal client ...
    (microsoft.public.windows.server.sbs)
  • RE: OWA page not displayed Outside
    ... Open ISA 2006 management console. ... Expand the server node and highlight 'Monitoring'. ... Click 'Configure Firewall Logging'. ... |> internal client as both the web proxy client and firewall client? ...
    (microsoft.public.windows.server.sbs)
  • Has your problem been resolved
    ... username not showing in ISA log ... They probably aren't using the proxy server. ... Troubleshooting Client Authentication on Access Rules in ISA Server 2004 ...
    (microsoft.public.isaserver)
  • Re: ISA firewall block outgoing email.
    ... I cannot send/receive email to the POP3 account unless I turn off the firewall in the CEICW. ... (This server is behind a router so I felt the test was safe enough to turn off the firewall). ... As I said, there is no need to add a hole for port 110, If the ISA client is installed on the workstation, Outlook will deliver the email. ...
    (microsoft.public.windows.server.sbs)
  • Re: Win2000 SBS moved to new location... logon issue
    ... I'm typing this reply right now through the VPN ... When you get to ISA, click on "Enable ISA Packet Filtering". ... The popup message you got about ISA filters means that any "custom" ISA ... Security and Acceleration Server | Servers and Arrays | ...
    (microsoft.public.backoffice.smallbiz2000)