Welcome to ISAserver.org

TZO and ISA 2004

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> Access Policies >> TZO and ISA 2004

Page: [1]

Message

<< Older Topic Newer Topic >>

TZO and ISA 2004 - 1.Jul.2004 10:44:00 PM

dmc3106

Posts: 23
Joined: 27.Jun.2004
From: North Carolina
Status: offline

Hello-

I am trying to use the TZO Dynamic DNS service behind ISA 2004 without much success. TZO support says "The port requirements are for firewalling only... just allow LAN->WAN and WAN->LAN for these ports, UDP and TCP both". TZO also specifies to open 21330, 21331, 21332.

I have created a FW policy to allow (Echo)TCP and (Echo) UDP bi-directionally. So, I have added both Internal and External networks to the "To" and "From" categories of the policy.

I believe I have something misconfigured here. Please help point me in the right direction!

(Also, not familiar with the various flavors of TCP/UDP - > Echo, Chargen, Daytime, Discard, etc. What's the difference here?)

Thanks for any insight!

Post #: 1

Featured Links*

RE: TZO and ISA 2004 - 2.Jul.2004 1:52:00 AM

tshinder

Posts: 47659
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi DMC,

Create an Access Rule that allows TCP 21330, TCP 21331 and 21332 outbound. You can create the Protocol Definitions "on the fly" when you create the Access Rule.

HTH,
Tom

(in reply to dmc3106)

Post #: 2

RE: TZO and ISA 2004 - 2.Jul.2004 11:18:00 PM

dmc3106

Posts: 23
Joined: 27.Jun.2004
From: North Carolina
Status: offline

Worked great! I was still having issues With TZO on a server behind ISA, so I installed the TZO client on the ISA server. Configured the ports (from) "localhost" (to)External and all works fine now.

Thanks -

(in reply to dmc3106)

Post #: 3

RE: TZO and ISA 2004 - 3.Jul.2004 7:22:00 PM

tshinder

Posts: 47659
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi DMC,

Great! You can install it on the ISA firewall, or on an internal server. It works for both. I actually do it both ways on my office network because I have two Internet connections and multiple ISA firewalls. Works a treat!

Good to hear you got it working and thanks for the follow up!

Tom

(in reply to dmc3106)

Post #: 4