Welcome to ISAserver.org

Authentification and MSN Messenger

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2000 Firewall] >> Firewall Client >> Authentification and MSN Messenger

Page: [1]

Message

<< Older Topic Newer Topic >>

Authentification and MSN Messenger - 3.Dec.2002 7:18:00 PM

Guest

Hello, i have some problems with the configuration of my ISA server to allow MSN Messenger. If i allow anonymous connection throw the Web Proxy, it work. But if i ask for authentification, MSN Messenger stop responding and tells that the authentificatin is wrong.

Is there a way for MSN Messenger to work without allowing anonymous connections?

Thanks

Post #: 1

Featured Links*

RE: Authentification and MSN Messenger - 4.Dec.2002 8:05:00 PM

tshinder

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi TCR,

Check out:

Q277812

HTH,
Tom

(in reply to Guest)

Post #: 2

RE: Authentification and MSN Messenger - 4.Dec.2002 10:24:00 PM

Guest

Thanks tshinder, but sadly, the KB article numbered Q277812 is not available. i found it on other search engine too, but can't get to see it. I was hoping maybe someone would tell me what the article is saying or i'll wait for it to become available again.

still, thanks a lot,

(in reply to Guest)

Post #: 3

RE: Authentification and MSN Messenger - 4.Dec.2002 10:40:00 PM

gcjunior

Posts: 114
Joined: 28.Oct.2002
From: Belgium
Status: offline

Hi,

I've just read the following on this board today checkout: MSN
I did not test or use it, just for your information, but let us know!

(in reply to Guest)

Post #: 4

RE: Authentification and MSN Messenger - 5.Dec.2002 8:39:00 PM

Guest

I saw it too. But all my ports are already enabled. I also executed a script i found on www.isatools.org to automatically configure my isa server to make MSN available, but i still have the same problem.

Thanks again.

(in reply to Guest)

Post #: 5

RE: Authentification and MSN Messenger - 7.Dec.2002 8:45:00 PM

tshinder

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline

Hey guys,

Check out Q277812, that always seems to help.

HTH,
Tom

(in reply to Guest)

Post #: 6

RE: Authentification and MSN Messenger - 9.Dec.2002 2:37:00 PM

Guest

Q277812 is still not available.

I'm trying everyday to get it.

(in reply to Guest)

Post #: 7

RE: Authentification and MSN Messenger - 11.Dec.2002 7:58:00 AM

tshinder

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi TCR,

Wow! Its really gone. Here ya go:

================
How to Allow MSN Instant Messenger Traffic Through ISA Server

--------------------------------------------------------------------------------
The information in this article applies to:

Microsoft Internet Security and Acceleration Server 2000

--------------------------------------------------------------------------------

SUMMARY
Support for Microsoft Instant Messenger is built into Microsoft Internet Security and Acceleration (ISA) Server 2000 as a predefined protocol; however, when if you enable packet filtering, Instant Messenger does not work without the additional configuration that is described in the "More Information" section in this article.

MORE INFORMATION
To configure Instant Messenger for sending messages:

Configure the Protocol Rule
Right-click Protocol Rule, and then click New Rule.

Type Instant Messenger Rule for the name of the rule, and then click Next.

Click Allow, and then click Next.

In the drop-down menu, click Selected Protocols, click MSN Messenger in the dialog box that opens, and then click Next.

Click Next.

Click Any Request on the Client type dialog box, and then click Finish.

Configure the Packet Filter
The type of packet filters to configure depends on the type of access you want to allow with Instant Messenger. First configure the packet filter to allow for simple Instant Messenger communication:
Right-click Packet Filters, and then click New Filter.

Type Instant Messenger Outbound, and then click Next.

Click All ISA Server Computers in the array, and then click Next.

Click Allow packet transmission, and then click Next.

Click Custom on the Filter type dialog box, and then click Next.

In the IP Protocol drop-down list, click TCP.

Under Direction click Both.

Under Local Port click Dynamic, change Remote Port to Fixed Port, and then for the Port Number type 1863.

Click Default IP addresses for each external interface on the ISA Servers computer, and then click Next.

Click All remote computers, click Next, and then click Finish.

Additional query words: IM config

Keywords : kbenv
Issue type : kbhowto
Technology : kbAudDeveloper kbISAS2000 kbISAServSearch
========================

HTH,
Tom

(in reply to Guest)

Post #: 8

RE: Authentification and MSN Messenger - 13.Dec.2002 3:16:00 PM

Guest

Already done, or else it wouldn't even work with anonymous. I allowed all protocoles. And the MSN packet filter is there too. I used a script on isatools.org to do it. Still, i verified with your answer that every options was the same. They are.

The real problem is that MSN don't seems to want to use the integrated authentification.

or maybe.........i have to look something with another firewall we have, maybe it blocks the 1863 and MSN was using the http port instead. That would explain a lot of things.

I'll keep you informed.

Thanks

(in reply to Guest)

Post #: 9

RE: Authentification and MSN Messenger - 13.Dec.2002 5:44:00 PM

tshinder

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi TCR,

Make sure you're logging all fields and check out which rule is blocking your request. I have a hard time with MSN not working, because I spend most of my time trying to disable it! Messengers are dangerous network applications and should not be allowed on corpnets.

HTH,
Tom

(in reply to Guest)

Post #: 10