RE: Controlling Bandwidth with ISA2004

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Hello Dan,

Thank you for posting here, and thanks for Steve's inputs.

According to your description, I understand that you want to control
bandwidth used and file extension downloads thru ISA server 2004 on SBS
2003 R2. If I have misunderstood the problem, please don't hesitate to let
me know.

Based on my research, Steve is correct. ISA server 2004 does not have
bandwidth control function. This is by-design.

I understand that this limitation may inconvenience our users and we
apologize for the inconvenience you faced. In our efforts to continue to
improve our products, you are welcome to add your suggestions in
Partnerfeedback newsgroup to make Microsoft products easier and more
powerful to use. Thanks for your understanding.

Submitting suggestions for product enhancement:

Legitimate Wishes fit into the following guidelines:

Enhancement or feature addition to existing Microsoft products
Reproducible problem or bug with current version that needs resolution
Cannot find documentation of feature within the help files
Difficulty using the product
All beta products
Product packaging complaints
Added accessibility feature for a Microsoft product
These can be submitted here:

https://support.microsoft.com/common/survey.aspx?scid=sw;en;1214&showpage=1&;
WS=Wish&url=http%3a%2f%2fwww.microsoft.com%2fireland%2fcontact%2f

For the file extension downloads limitation, we can deny internal client
download file with some extension thru ISA 2004. Please perform the
following steps:

1. Please open the ISA management console, navigate to Firewall Policy

2. Right click "SBS Internet Access Rule", select "Configure HTTP"

3. Select Extensions tab, you will find the following options:

The Block responses containing Windows executable content option allows you
to prevent users from downloading files that are Windows executable files
(such as .exe files, but any file extension can be used on a Windows
executable). The HTTP Security filter is able to determine if the file is a
Windows executable because the response will begin with an MZ. This can be
very helpful when you need to prevent your users from downloading
executables through the ISA firewall.

You can control what file extensions are allowed to be requested through
the ISA firewall. This is extremely useful when you want to block users
from requesting certain file types through the ISA firewall. For example,
you can block users from accessing .exe, .com, .zip, and any other file
extension through the ISA firewall.

The Allow all extensions option allows you to configure the Access Rule to
allow users access to any type of file based on file extension through the
ISA firewall. The Allow only specified extensions option allows you to
specify the precise file extensions that users can access through the ISA
firewall. The Block specified extensions (allow all others) option allows
you to block specified file extensions that you deem dangerous.

If you select the Allow only specified extensions or Block specified
extensions (allow all others) option, you need to click the Add button and
add the extensions you want to allow or block.

The Extension dialog box appears after you click the Add button. Enter the
name of the extension in the Extension text box. For example, if you want
to block access to .exe files, enter .exe . Enter a description if you like
in the Description (optional) text box. Click OK to save the new extension.
And click Apply to save all the settings.

You can also consider using third party filter to achieve this goal:

Partner Application Filters
http://www.microsoft.com/isaserver/partners/applicationfilters.mspx

I hope these steps will give you some help.

Thanks and have a nice day!

Best regards,

Terence Liu(MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| Reply-To: "Daniel Jewel" <cyberdudeiq@xxxxxxxxxxxx>
| From: "Daniel Jewel" <cyberdudeiq@xxxxxxxxxxxx>
| Subject: Controlling Bandwidth with ISA2004
| Date: Tue, 21 Aug 2007 17:23:43 -0300
| Lines: 9
| Organization: Private
| MIME-Version: 1.0
| Content-Type: text/plain;
| format=flowed;
| charset="iso-8859-1";
| reply-type=original
| Content-Transfer-Encoding: 7bit
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Windows Mail 6.0.6000.16480
| X-MimeOLE: Produced By Microsoft MimeOLE V6.0.6000.16480
| Message-ID: <uLQGvED5HHA.5984@xxxxxxxxxxxxxxxxxxxx>
| Newsgroups: microsoft.public.windows.server.sbs
| NNTP-Posting-Host: 201.22.18.179.adsl.gvt.net.br 201.22.18.179
| Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP04.phx.gbl
| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:58141
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| Hi all,
|
| would like to control bandwidth used and file extension downloads by
users
| and departments on a SBS 2003 R2 Premium,2 NICs all SPs applied
|
| Many thanks,
|
| Dan
|
|

.

Relevant Pages

  • RE: ~$normal.dot file not closed
    ... have saved my computing life! ... >The *.doc extension is important. ... file extension in order to determine which application to ... >Please post all follow-ups to the newsgroup. ...
    (microsoft.public.word.application.errors)
  • Re: Want to make an update program for only use once.
    ... >security has been enough. ... Your App could register that file extension so that your App is ...
    (comp.lang.pascal.delphi.misc)
  • Re: html shtml
    ... if you mean a file extension to a piece of content stored in a ... It would have been nice if I didn't have to change from html to shtml ... for my web site. ... Then I had to have several new pages (html extension) to ...
    (alt.html)
  • Re: Email?
    ... Re-read my original reply. ... File extension is critical. ... Gord Dibben MS Excel MVP ...
    (microsoft.public.excel.setup)
  • Re: .g98 files
    ... Probably to satisfy their PC's ... file extension requirement or possibly also satisfy their virus guard. ... but it's never had a .G98 extension. ...
    (comp.sys.cbm)