Re: SKYPE through ISA 2004

Thanks.

"Pop" <Iknowyouwantit@xxxxxxx> wrote in message
news:uHornlBPHHA.1380@xxxxxxxxxxxxxxxxxxxxxxx
FYI..

http://www.iss.net/security_center/advice/Exploits/Ports/139/default.htm

http://www.linklogger.com/TCP139.htm


"Mike Webb" <Mike_Webb@xxxxxxxxxxxxxxxxx> wrote in message
news:eqIImO9OHHA.2232@xxxxxxxxxxxxxxxxxxxxxxx
OK, thanks. I should have thought of this.

"Steve" <newsgroup@xxxxxxxxxx> wrote in message
news:OwIQSo0OHHA.4280@xxxxxxxxxxxxxxxxxxxxxxx
Yes that's basically how I'm suggesting you "allow" Skype. Even though
the laptops don't theoretically have access to your internal network
that's where they are connected. Otherwise if you're comfortable with
them being internal you can try to set them up as SNAT clients for ISA
which means they have to have an internal static IP address.

"Justin Brown - SYNACS" <jcbrown@xxxxxxxxx> wrote in message
news:1169155530.497493.297060@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
I think Steve is referring to physical access to the network, and not
necessarily about actual permission to use resources there. Correct me
if I'm wrong, Steve.

In other words, if I'm this laptop user, plugged in but not joined to
the domain, and I have enough connectivity to make a connection,
through the switch, to TCP port 80 or 139 on another node, then this
node actually is inside the network.

One way around this is to insert (if you haven't already) a NAT device
that A) ISA Server and B) OTHER *both* plug into.

A Skype user would fit into the category of 'other'.



Mike Webb wrote:
Well, there laptops do NOT have access to the network, all they gain
is
internet access. They've got IP's from DHCP, but are not joined to my
network.

Mike

"Steve" <newsgroup@xxxxxxxxxx> wrote in message
news:u2kya5zOHHA.4172@xxxxxxxxxxxxxxxxxxxxxxx
Are you absolutely sure you want to allow Skype inside your network?
I'd
give those users a connection on the outside of your network to
avoid any
potential security issues.

"Mike Webb" <Mike_Webb@xxxxxxxxxxxxxxxxx> wrote in message
news:uMyVjfzOHHA.4172@xxxxxxxxxxxxxxxxxxxxxxx
Running SBS 2003 Premium, ISA 2004, Exchange, WSUS, 2 NIC's and a
router,
dynamic IP, DDNS service through dyndns.org.
===========================
We've got a couple folks here doing research for a few months. On
their
personal laptops, they have SKYPE to converse with family and
associates.
They tried it for the first time yesterday and told me today it
wouldn't
work. First thing I think of is ISA. The laptops are not part of
the
domain, but each of them is a Power User in the domain. For those
who've
gotten this to work, what tips can you give me?

--
Mike Webb
Platte River Whooping Crane Maintenance Trust, Inc.
a 501 (c)(3) conservation non-profit organization












.

Relevant Pages

  • Re: What does the "Configure email and Internet Connection Wizard"
    ... > the CEICW does (listed under "Configure Email and Internet Connection ... > Configure E-mail and Internet Connection Wizard is designed to correctly ... > configure settings for your network, firewall, secure Web site, and e-mail ...
    (microsoft.public.windows.server.sbs)
  • Re: What does the "Configure email and Internet Connection Wizard"
    ... Understanding the Configure E-mail and Internet Connection WizardThe ... Configure E-mail and Internet Connection Wizard is designed to correctly ... configure settings for your network, firewall, secure Web site, and e-mail ...
    (microsoft.public.windows.server.sbs)
  • Re: Outgoing POP3 email missing/lost/not received
    ... ISP's mail server instead of the domain name on the ... SUMMARY OF SETTINGS FOR CONFIGURE E-MAIL AND INTERNET ... Internet Connection Wizard. ... After the wizard completes, the following network connection ...
    (microsoft.public.windows.server.sbs)
  • Re: Remote Access and Outlook Web Access on SBS 2003
    ... SUMMARY OF SETTINGS FOR CONFIGURE E-MAIL AND INTERNET ... Internet Connection Wizard. ... network, firewall, secure Web site, and e-mail. ... NETWORKING CONFIGURATION SUMMARY ...
    (microsoft.public.windows.server.sbs)
  • Re: Wireless network issue for two SP2 computers
    ... with DSL Internet ... When I pull up view network computers, when I try to add network ... >The LAN connection also has TCP/IP, with Client for MS Networks, QoS Packet ... If the computers run the original or SP1 versions of Windows XP, ...
    (microsoft.public.windowsxp.network_web)
Loading