Re: SKYPE through ISA 2004

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

That helps, thanks.

"Justin Brown - SYNACS" <jcbrown@xxxxxxxxx> wrote in message
news:1169159693.179341.268990@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
The NAT device is your router. So the idea is like this:

Modem -> Router -> ISA -> Switch -> Nodes
|-> Access Point or Switch -> Skype-enabled
nodes and other untrusted devices


That gives you a level of separation that Joe admin is comfortable
with. If you want to place it inside of SBS, that's fine and well but
as the admin you are the one accountable for decisions like that.

Hope that helps.


Mike Webb wrote:
Sorry, but I don't know what a NAT device is. Between ISA and the
clients
is a switch and router, if that's what you mean.


"Justin Brown - SYNACS" <jcbrown@xxxxxxxxx> wrote in message
news:1169155530.497493.297060@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
I think Steve is referring to physical access to the network, and not
necessarily about actual permission to use resources there. Correct me
if I'm wrong, Steve.

In other words, if I'm this laptop user, plugged in but not joined to
the domain, and I have enough connectivity to make a connection,
through the switch, to TCP port 80 or 139 on another node, then this
node actually is inside the network.

One way around this is to insert (if you haven't already) a NAT device
that A) ISA Server and B) OTHER *both* plug into.

A Skype user would fit into the category of 'other'.



Mike Webb wrote:
Well, there laptops do NOT have access to the network, all they gain
is
internet access. They've got IP's from DHCP, but are not joined to my
network.

Mike

"Steve" <newsgroup@xxxxxxxxxx> wrote in message
news:u2kya5zOHHA.4172@xxxxxxxxxxxxxxxxxxxxxxx
Are you absolutely sure you want to allow Skype inside your network?
I'd
give those users a connection on the outside of your network to
avoid
any
potential security issues.

"Mike Webb" <Mike_Webb@xxxxxxxxxxxxxxxxx> wrote in message
news:uMyVjfzOHHA.4172@xxxxxxxxxxxxxxxxxxxxxxx
Running SBS 2003 Premium, ISA 2004, Exchange, WSUS, 2 NIC's and a
router,
dynamic IP, DDNS service through dyndns.org.
===========================
We've got a couple folks here doing research for a few months. On
their
personal laptops, they have SKYPE to converse with family and
associates.
They tried it for the first time yesterday and told me today it
wouldn't
work. First thing I think of is ISA. The laptops are not part of
the
domain, but each of them is a Power User in the domain. For those
who've
gotten this to work, what tips can you give me?

--
Mike Webb
Platte River Whooping Crane Maintenance Trust, Inc.
a 501 (c)(3) conservation non-profit organization







.