RE: ISA access rules, help
- From: v-bpeng@xxxxxxxxxxxxxxxxxxxx (Bill Peng [MSFT])
- Date: Thu, 21 Jul 2005 12:16:12 GMT
Hi Gary,
Just wanna check whether there's any update on this issue.
If you have any feedback or questions, please don't hesitate to let me know.
Regards,
Bill Peng
MCSE 2000, MCDBA
Microsoft Online Partner Support
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
====================================================
Business-Critical Phone Support (BCPS) provides you with technical phone
support at no charge during critical LAN outages or "business down"
situations. This benefit is available 24 hours a day, 7 days a week to all
Microsoft technology partners in the United States and Canada.
This and other support options are available here:
BCPS:
https://partner.microsoft.com/US/technicalsupport/supportoverview/40010469
Others:
https://partner.microsoft.com/US/technicalsupport/supportoverview/
If you are outside the United States, please visit our International
Support page: http://support.microsoft.com/common/international.aspx.
====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
>X-Tomcat-ID: 110728746
>References: <1121359000.666970.144200@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
>MIME-Version: 1.0
>Content-Type: text/plain
>Content-Transfer-Encoding: 7bit
>From: v-bpeng@xxxxxxxxxxxxxxxxxxxx ("Bill Peng [MSFT]")
>Organization: Microsoft
>Date: Fri, 15 Jul 2005 06:58:47 GMT
>Subject: RE: ISA access rules, help
>X-Tomcat-NG: microsoft.public.windows.server.sbs
>Message-ID: <BVM9vqQiFHA.3120@xxxxxxxxxxxxxxxxxxxxx>
>Newsgroups: microsoft.public.windows.server.sbs
>Lines: 156
>Path: TK2MSFTNGXA01.phx.gbl
>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:135976
>NNTP-Posting-Host: TOMCATIMPORT1 10.201.218.122
>
>Hi Gary,
>
>Thank you for posting here.
>
>First of all, please let me know whether you're using ISA 2000 or ISA 2004
>(SBS SP0 or SBS SP1).
>
>Generally, if you're going to access an internal client computer's IIS
>page, the ISA server will not be used as a proxy server. Please make sure:
>
>1. You've typed http://servername/videoinsight as the http address.
>2. The following configuration has been made:
>
>a) Open Internet Options.
>b) Click Connections tab and click LAN Settings.
>c) Make sure that the "Use a proxy server for your LAN" has been checked
>and the SBS server's name and port 8080 are in the boxes.
>d) Make sure the "Bypass proxy server for local addresses" has been
checked.
>
>To publish the services to the internet, I recommend you to create
multiple
>server publishing rules to achieve the goal (I assume that you're using
ISA
>2000 since you didn't mention SP1). Since SBS already used port 80, I
>recommend you to use port 8888 for the second server. You can follow the
>steps below to publish the servers with port 8888, 4000, 1433, and 11111.
>(I will use 8888 as an example)
>
>1. Create a Protocol Definition for the new port in ISA. To do so:
>
>a. Open ISA Management, navigate under the servername to Policy
>Elements\Protocol Definitions.
>b. Right-click and then click New, click Definition.
>c. Type this for the name: Internal Website 8888 Inbound, click Next.
>
>Port number: 8888
>Protocol type: TCP
>Direction: Inbound
>
>d. Click Next.
>e. No secondary connections needed, so click Next.
>f. Click Finish.
>
>2. Create a Server publishing rule for that client. To do so:
>
>a. In ISA Management, navigate under the servername to Publishing, Server
>Publishing Rules.
>b. Right click Server Publishing Rules, click New, click Rule.
>c. Type the name "Internal Website 8888" (no quotes) and click Next.
>d. Enter the IP address of the internal server in the space labeled "IP
>address of the internal server", and enter the external IP of the server
in
>the box "External IP address on ISA Server". Then click Next.
>e. Select the Protocol Definition created in above steps from the drop
down
>list presented, click Next.
>f. Click Next to select Any Request.
>
>3. Create other server publishing rules to publish other ports (4000,
1433,
>and 11111).
>
>I hope the above info helps.
>
>If there's any update, please don't hesitate to let me know.
>
>Regards,
>
>Bill Peng
>MCSE 2000, MCDBA, CCNP, CCDA
>Microsoft CSS Online Newsgroup Support
>
>Get Secure! - www.microsoft.com/security
>=====================================================
>When opening a new thread via the web interface, we recommend you check
the
>"Notify me of replies" box to receive notification. When responding to
>posts via your newsreader, please "Reply to Group" so that others may
learn
>and benefit from your issue.
>
>Microsoft engineers can only focus on one issue per thread. Although we
>provide other information for your reference, we recommend you post
>different incidents in different threads to keep the thread clean. In
doing
>so, it will ensure your issues are resolved in a timely manner.
>
>The SBS public newsgroup only focuses on SBS related technical issues, for
>other Microsoft products, we recommend you to post to appropriate
newsgroup
>to get most qualified responses.
>http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
>
>For urgent issues, you may want to contact Microsoft PSS directly. Please
>check http://support.microsoft.com for regional support phone numbers.
>
>Any input or comments in this thread are highly appreciated.
>=====================================================
>This posting is provided "AS IS" with no warranties, and confers no rights.
>
>--------------------
>>From: "Gary V." <salarmy@xxxxxxxxxxxx>
>>Newsgroups: microsoft.public.windows.server.sbs
>>Subject: ISA access rules, help
>>Date: 14 Jul 2005 09:36:40 -0700
>>Organization: http://groups.google.com
>>Lines: 25
>>Message-ID: <1121359000.666970.144200@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
>>NNTP-Posting-Host: 208.53.87.254
>>Mime-Version: 1.0
>>Content-Type: text/plain; charset="iso-8859-1"
>>X-Trace: posting.google.com 1121359006 990 127.0.0.1 (14 Jul 2005
16:36:46
>GMT)
>>X-Complaints-To: groups-abuse@xxxxxxxxxx
>>NNTP-Posting-Date: Thu, 14 Jul 2005 16:36:46 +0000 (UTC)
>>User-Agent: G2/0.2
>>Complaints-To: groups-abuse@xxxxxxxxxx
>>Injection-Info: f14g2000cwb.googlegroups.com; posting-host=208.53.87.254;
>> posting-account=FbCvfA0AAACjuAQLB1cdUV3g5WbrHvTY
>>Path:
>TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfeed00.sul.t-online.de!t-onl
i
>ne.de!news.glorb.com!newsread.com!news-xfer.newsread.com!postnews.google.co
m
>!f14g2000cwb.googlegroups.com!not-for-mail
>>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:135796
>>X-Tomcat-NG: microsoft.public.windows.server.sbs
>>
>>I'm installing a digital video surveillance system in our warehouse.
>>The program runs on its own computer inside the sbs 2003 prem network.
>>All the recording works great. My questions...
>>The program publishes on its own computer a web page (default port 80,
>>but I can change the port to anything I want) so any computer with a
>>browser can view all the live video feeds. I can get
>>http://localhost/videoinsight to work on the actual video computer but
>>when I try http://192.168.16.32/videoinsight I get my sbs server
>>firewall error message network access message: page cannot be
>>displayed. The video software says it needs ports 4000 (network
>>clients) 1433 (sql authentication) 11111 (video insight control
>>channel) For web clients 80 and Email 25.
>>
>>So how do I open these ports in isa? Do I just make an access rule? For
>>testing before I change port 80 can I open port 80 for internal only or
>>is this not possible? And what port number should I change it to later?
>>
>>My second question, how would I publish the video web page on whatever
>>port I chose on a client computer on the sbs 2003 prem network? I guess
>>I would have to port forward to the video computer but I need some help
>>with that or a paper walk through.
>>
>>Thanks for any help you all can offer
>>Gary V.
>>
>>
>
>
.
- References:
- ISA access rules, help
- From: Gary V.
- RE: ISA access rules, help
- From: "Bill Peng [MSFT]"
- ISA access rules, help
- Prev by Date: RE: FTP wite access
- Next by Date: RE: Upgrade of Sharepoint to SQL Server 2000 - Questions
- Previous by thread: RE: ISA access rules, help
- Next by thread: Dial 9 for outbound faxing
- Index(es):
Relevant Pages
|
