Welcome to ISAserver.org

TZO filters for ISA2K4 web publishing..

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 General ] >> Web Publishing >> TZO filters for ISA2K4 web publishing..

Page: [1]

Message

<< Older Topic Newer Topic >>

TZO filters for ISA2K4 web publishing.. - 27.Oct.2004 8:16:00 PM

marvinc

Posts: 20
Joined: 7.Oct.2004
From: Atlanta, GA
Status: offline

I'm wondering if someone can help me figure out how to publish a web server on ISA using TZO? In iSA2K you had to create packet filters, protocol definitions, and protocol rules for the TZO filters. How is this done in ISA2K4? I've searched and haven't come across a tutorial for doing this on the site.

Any responses are appreciated.

Post #: 1

Featured Links*

RE: TZO filters for ISA2K4 web publishing.. - 27.Oct.2004 8:24:00 PM

Ara.A

Posts: 259
Joined: 21.Oct.2004
Status: offline

Hello
concepts are the same, packet filters and publishing, just moved some stuff [Big Grin]

Create detination set for tzo update servers and create rules for accessing it from isa machine itself. Hope it helps [Wink]

(in reply to marvinc)

Post #: 2

RE: TZO filters for ISA2K4 web publishing.. - 27.Oct.2004 9:03:00 PM

marvinc

Posts: 20
Joined: 7.Oct.2004
From: Atlanta, GA
Status: offline

Excuse my ignorance but I don't see where to create a destination set. Can I get some guidance on this because the Help feature isn't helping.

thnks

(in reply to marvinc)

Post #: 3

RE: TZO filters for ISA2K4 web publishing.. - 27.Oct.2004 10:44:00 PM

marvinc

Posts: 20
Joined: 7.Oct.2004
From: Atlanta, GA
Status: offline

An hour later and I'm no closer to getting this figured out. I can create a web publishing rule but it doesn't do me any good because I can't create the destination rules for the TZO filters. This rule is configured as follows:
Gen: WebServer
Action: Allow
From: Anywhere
To: web server that's in a web group and not a DMZ
Request appear to come from the ISA Server computer
Traffic: HTTP
Listener: Listener1 which is the external interface. Its properties:
Networks: External - 68.215.201
254 - BellSouth ISP
Preferences: Enable HTTP
Public Name: Requests for the following websites:
www.nusolutions.biz
www.nubiint.com
Paths: /*
Bridging: Web server
Redirect requests to HTTP port: 80
Users: All users
Schedule: Always

I get the following error after applying this rule:

Description: The Web Proxy filter failed to bind its socket to 68.215.201.254 port 80. This may have been caused by another service that is already using the same port or by a network adapter that is not functional. To resolve this issue, restart the Microsoft Firewall service. The error code specified in the data area of the event properties indicates the cause of the failure. The failure is due to error: 0x80072742

Note: I have another rule published for the exchange mail server SMTP.

My questions are:
1. How or where to configure the TZO filters?
2. Does the TZO software have to be installed on the ISA firewall server or can I leave it on the web server?

Any responses are appreciated.

[ October 27, 2004, 10:46 PM: Message edited by: marvinc ]

(in reply to marvinc)

Post #: 4

RE: TZO filters for ISA2K4 web publishing.. - 28.Oct.2004 2:28:00 AM

marvinc

Posts: 20
Joined: 7.Oct.2004
From: Atlanta, GA
Status: offline

Just out of curiosity I created two User Defined Protocols with the following settings:
Gen: TZO - Inbound
Parameters: Port Range 21330 - 21333

Gen: TZO - Outbound
Parameters: Port Range 21330 - 21333

Would these sub as TZO filters? If so where do I apply them?

????

(in reply to marvinc)

Post #: 5

RE: TZO filters for ISA2K4 web publishing.. - 28.Oct.2004 2:59:00 AM

Ara.A

Posts: 259
Joined: 21.Oct.2004
Status: offline

Sorry I don�t know what ports tzo is using. But general rule of thumb would be to install the client. Find out what protocol, port, domain or ip it uses to contact tzo and update the ip address in their database. Sorry hope you will find the way out. Don�t they tell you in tzo site what the hell their ip and port ranges are for servers?

(in reply to marvinc)

Post #: 6

RE: TZO filters for ISA2K4 web publishing.. - 28.Oct.2004 3:21:00 AM

marvinc

Posts: 20
Joined: 7.Oct.2004
From: Atlanta, GA
Status: offline

LOL! I know what the ports are and I have the tzo service installed on my web server. As I mentioned in my previous post the ports are
21330, 21331, 21332, 21333

What I'm unsure of is how to create the filters in ISA2K4 for these ports and assign them to my web server rule. I created an Inbound and Outbound User Defined Protocol but I don't think this is correct. So I need to know how to create the tzo filters and assign them to the web server publishing rule so that I can publish and access my websites.
It was kinda easy and straight forward in ISA2k.

thnks

(in reply to marvinc)

Post #: 7

RE: TZO filters for ISA2K4 web publishing.. - 28.Oct.2004 3:43:00 AM

Ara.A

Posts: 259
Joined: 21.Oct.2004
Status: offline

Hello
Do it this way
1. click on firewall policy tab, tool box, the new protocol
2. give it a name based on what direction it is going
3. Then click on new and specify the port and protocol type. Keep doing this till you make all definitions
4. go to network objects, click new and make a new address range and punch in the address for tzo servers
5. right click on firewall policy and create a new access rule which allows from local host(isa) using your all tzo defined protocols to defined ip address for tzo servers

Hope this helps
[Wink]

(in reply to marvinc)

Post #: 8