Re: open port in isa 2004 ?

Hi Crina... wonderful, application now works.

Many thanks for the links too.


""Crina Li"" <v-crinal@xxxxxxxxxxxxxxxxxxxx> wrote in message
news:H8%23wudzQGHA.3184@xxxxxxxxxxxxxxxxxxxxxxxx
Hi Maxibo,

Thank you for posting in SBS newsgroup.

From the description, I understand that you want to know how to open port
on ISA 2004. If I have misunderstood your concerns, please do not hesitate
to let me know.

AS I know, if you want to let the internal users accessing external
resource from specific port, you can create an Access rule as following:

1. Open the ISA 2004 management console. Navigate to Firewall Policy,
right
click it and select New->Access Rule.
2. Type a descriptive name for the access rule and click Next.
3. Choose Allow and click Next.
4. Under "This rule applies to" option, choose "Selected protocols" and
then select the protocol (if the protocol does not exist, you can new a
protocol).
5. Click Ports and you can type the port and then click Next.
6. On the Access Rule Sources page, add "Internal" and click Next.
7. On the Access Rule Destinations page, add destination and click Next.
8. Apply this rule to the Users and Finish the Wizard.
9. Move this rule to the top.

If you want to let the external users accessing internal resource of SBS,
you can create a Server Publishing rule:

1. Open ISA console.
2. Expand Server name and then click Firewall Policy.
3. In the right pane, click tasks and then click Create New Server
Publishing Rule.
4. Type the name of the rule and then click Next.
5. Click Browse and then click Browse.
6. Click Advanced and then click Find Now.
7. Select the computer you want to access from external network and then
click Ok.
8. Click Find and then click OK.
9. Then the IP of the machine will be listed in the related column.
10. Select the protocol the port hold on the client and then click Ports
and type the port number in Firewall Ports and Published Server Ports and
then click NEXT. If the protocol is not listed in the dropdown list, you
may need to create a new protocol for the port:

A. Click New on the current page.
B. In the wizard, input the name of the rule and then click NEXT.
C. Click New and then select the Protocol type, Direction and Port Range.
D. Click OK and then click NEXT.
E. Follow the wizard to finish it.

11. In the Listen for requests from these networks list, click to select
External and then click Address and select the appropriate option.
12. Click Ok and then click Next, and then click Finish.

For more information regarding ISA 2004, you may need to refer the
following documents:

837831 How to permit non-Microsoft programs to connect to the Internet
through Internet Security and Acceleration Server 2004
http://support.microsoft.com/default.aspx?scid=kb;EN-US;837831

How to configure networks in ISA Server 2004
http://support.microsoft.com/?id=867483

What's New and Improved in ISA Server 2004
http://www.microsoft.com/isaserver/evaluation/whatsnew.asp

ISA Server 2004 Performance Best Practices
http://www.microsoft.com/technet/prodtechnol/isa/2004/performancebestpractic
es.mspx

ISA Server 2004 Quick Start Guide
http://download.microsoft.com/download/3/7/b/37b0cbc4-e578-4082-a779-de4fbe8
76f06/ISA2004SE_quickstartguide-Rev%201%2003.doc

ISA Server 2004 ISA Server 2004 Configuration Guide
http://download.microsoft.com/download/3/7/b/37b0cbc4-e578-4082-a779-de4fbe8
76f06/ISA2004SE_configguide-Rev%201%2003.doc

ISA Server 2004 Product Documentation
http://download.microsoft.com/download/5/a/e/5ae686f4-c4a6-4213-bc50-abc46b0
714dc/isa.chm

ISA 2004 Guidance
http://www.microsoft.com/isaserver/techinfo/guidance/2004/default.mspx

ISA 2004 best practices, Tips and Tricks:
http://www.isaserver.org/tutorials/2004bestpractices-p1.html

Thanks for your time and I look forward to hearing from you.

Best regards,

Crina Li (MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check
the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In
doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.

=====================================================

This posting is provided "AS IS" with no warranties, and confers no
rights.
--------------------
| From: "Maxibo" <totallyanon@xxxxxxxxx>
| Subject: open port in isa 2004 ?
| Date: Wed, 8 Mar 2006 23:59:17 -0000
|| Newsgroups: microsoft.public.windows.server.sbs
| |
| I know and can find document for isa 2000, damn if i can find for 2004..
|
| step by step appreciated...lol
|
|
|



.

Relevant Pages

  • Re: Trying to understand this behavior, Ports in IIS
    ... That tells me the ISA server was accepting the connections. ... assign port 8080. ... In the border router and in the PIX firewall (both devices are "in front of" ...
    (microsoft.public.inetserver.iis.security)
  • Re: sys/1386/i386/mptable.c rev 1.239 breaks boot.
    ... >> If a valid ELCR was found, consult it for the trigger mode of ISA ... ioapic0: intpin 1 bus ISA ... xl0: using port I/O ...
    (freebsd-current)
  • Re: "Opening ports"
    ... When filtering log on port 5656, ... Create Protocol: ... Understanding the ISA 2004 Access Rule Processing ... Microsoft Internet Security & Acceleration Server: ...
    (microsoft.public.isa)
  • Re: Outbound VPN connection
    ... In ISA 2000, create a new Protocol definition under Policy elements to ... Make sure under Access Policy, Protocol rules, you have you users set to ... If it is standard PPTP and GRE then port 1723 is likely used and this ... sbs 2003 premium with isa 2000. ...
    (microsoft.public.windows.server.sbs)
  • RE: HOW DO I ACCESS ISA SERVER in SBS Premium 2003
    ... Without ISA, you can configure RRAS to do port forwarding. ... Publishing a SQL Server Computer with ISA Server 2004 ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
Loading