Re: ISA 2004 Publishing Rule ?

Tech-Archive recommends: Fix windows errors by optimizing your registry

Hi Jim -

I would clarify on whether they need inbound access to your network or not. Considering that your only TCP port (264) is listed as outbound only, I'm going to guess that you'll be fine with outbound only. Since there is no need opening up inbound unless you absolutely have to, I would configure ISA to allow this traffic outbound and see if it works. If not, you can always open up inbound later.

Open ISA Management, and go to your Firewall Policy, then the Toolbox (in the Right-hand pane). Expand Protocols and click on New. Give the protocol a meaningful name | Next | select to allow traffic | Next | then add the primary ports to the protocol (TCP 264 Outbound) | Next | Add ports for your secondary connections (UDP 500 Send Receive and UDP 2746 Send Receive | Next and finish the wizard. Click the apply button at the top of the Firewall Policy page to commit the changes

Assuming the PC that needs access has the ISA firewall client installed, you should be able to test the setup to see if it works. If it doesn't, you may try editing the protocol definition you just created and moving the UDP ports from secondary connections to primary connections and see if that helps. If not, then we may be looking at opening up for inbound access.

HTH!

--

Chad A. Gross - SBS MVP
SBS ROCKS!
www.msmvps.com/blogs/cgross

<jdr.smith@xxxxxxxxxx> wrote in message news:1174519283.251968.26290@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Hi All,

Bit confused as to what I need to do here.

I have a requirement to setup an EDI system on a PC on an SBS 2003
Premium network.

Basically SBS 2003 is regular multihomed install.

Details given to use by EDI company are:

TCP Port 264 (Outbound Only)
TCP and UDP Port 500 ( Bi-Directional )
UDP Port 2746 ( Bi-Directional )

Apart from opening up ports in the firewall on the router and
forwarding them onto the 2nd NIC in the server, am I right in thinking
that I also need to create a publing rule and/or access rules in ISA
2004 to send inbound traffic onto the IP of the EDI PC on the
network ?

Anyone any advice on the best way of going about this ?

Jim.


.

Quantcast