Welcome to ISAserver.org

Blackberry Server Behind Isa Server Cluster

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Firewall] >> Access Policies >> Blackberry Server Behind Isa Server Cluster

Page: [1]

Message

<< Older Topic Newer Topic >>

Blackberry Server Behind Isa Server Cluster - 3.Jan.2011 5:09:07 PM

lenamas

Posts: 4
Joined: 3.Jan.2011
Status: offline

Hello!

This is the enviorment:
Windows Server 2003
Blackberry Enterprise Server 5.0
Isa Server 2006 (2 server in cluster config)

I want to give access to the BB Server through the ISA Server.

I can telnet to srp.*.blackberry.net on port 3101 from the isa server with success.

I created the access rule from the bb server to the external network, on port 3101.

I cant telnet or run the test tool from the bb server, im getting this error: connect() failed: Connection refused (10061).

On the Isa logging i get this message:
0x80074e21 FWX_E_ABORTIVE_SHUTDOWN

Any help?

Max

Post #: 1

Featured Links*

RE: Blackberry Server Behind Isa Server Cluster - 4.Jan.2011 11:13:52 AM

pwindell

Posts: 2228
Joined: 12.Apr.2004
From: Taylorville, IL
Status: offline

Aren't connections to the Backberry server inbound from the phones?,...initiated by the phones? In other words the phones connect to the server,...the server does not connect to the phones?

_____________________________

Phillip Windell

(in reply to lenamas)

Post #: 2

RE: Blackberry Server Behind Isa Server Cluster - 4.Jan.2011 4:20:15 PM

lenamas

Posts: 4
Joined: 3.Jan.2011
Status: offline

In the BES documentation states that the BES Server have to connect to the srp.*.blackberry.net.

(in reply to pwindell)

Post #: 3

RE: Blackberry Server Behind Isa Server Cluster - 4.Jan.2011 4:21:03 PM

lenamas

Posts: 4
Joined: 3.Jan.2011
Status: offline

This is for activating the license.

The strange is that I can do the telnet from the ISA server :s

(in reply to lenamas)

Post #: 4

RE: Blackberry Server Behind Isa Server Cluster - 5.Jan.2011 10:23:29 AM

pwindell

Posts: 2228
Joined: 12.Apr.2004
From: Taylorville, IL
Status: offline

Well the Protocol created has to be correct. It 's is not simply a discussion of "ports". A port is just a Layer4 Address,...nothing more.

Then the Rule would have to be anonymous,...that is it would use the term "All Users" in the Users portion of the Rule.

The Destiantion of the Rule would have to be an Address Set with the IP Range or the IP Subnet of the Backberry Destiantion. Domain Sets or URL Sets will not work.

The Source of the Rule would be a Computer Object, or Computer Set, or an Address Set (pick one) that contains the IP# of the Backberry Server on your LAN.

After all that you only have half of the solution. If the phones have to connect to the Blackberry Server from "outside" then you need to use a Non-Web Server Publishing Rule to cover that process.

I do not use a Blackberry Server,..so I don't not know all the specifics of what they do or how they do it.

_____________________________

Phillip Windell

(in reply to lenamas)

Post #: 5