elmajdal
Posts: 5103
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline
|
I'm peparing this in an article to be published soon on my site, but as you need it now here it is : 
Essentials agent needs to be manually installed on a server with ISA 2004/2006
Follow these step to manually install the agent and configure the needed rules on the ISA server.
Configure manual agent installs settings in Essentials 2007
1. In the Essentials Console, click the Administration button.
2. In the Administration pane, expand Administration, and then click Settings.
3. In the Settings pane, expand Type: Server, right-click Security, and then click Properties.
4. In the Global Management Server Settings - Security dialog box, on the General tab, click Review new manual agent installations in pending management view, and then click OK.
5. After completing the manual agent installation process and configuring the appropriate firewall rules on the ISA server below, you will need to approve the agent for installation in the Pending Actions view in the Administration space.
Manually install an agent on the ISA server
1. On the computer on which you want to install the agent, from the Essentials 2007 Setup media, start SetupSCE.exe.
2. Click Agent to install an agent.
3. In the Agent Setup wizard, select the Specify Management Group Information check box.
4. On the Management Group Configuration page, specify the following:
o In Management Group Name box, enter <Management Server netbios name>_MG.
o In Management Server name box, enter the fully qualified domain name (FQDN) of the Essentials 2007 Management Server.
5. Select either Local System or specify a domain user account for the agent action account.
6. Complete the Agent Setup wizard.
7. If you are using local policy to configure managed computers, create a new directory in the installation dir named "Certificates”. Copy the WSUSSSLCert.cer and WSUSCodeSigningCert.cer to the new directory from the System Center Essentials 2007\Certificates directory on the Essentials management server. Run the following utility, specifying the same settings submitted to the Feature Configuration Wizard on the Essentials 2007 Management Server (brackets indicate placeholders where you must supply a value
[InstallDirectory]\SCECertPolicyConfigUtil.exe /PolicyType local /ManagementGroup [Essentials Management Server netbios name]_MG /SCEServer SCEServer.FQDN /AEMFileShare \\SCESERVER.FQDN\[AEMPATH] /AEMPort [port] /ConfigureRemoteControl [true/false] /ConfigureAEM [true/false]
Create a new access rule for the Essentials agent in ISA
1. Click Start, point to Programs, point to Microsoft ISA Server, and then click ISA Server Management.
2. Expand the Firewall Policy node under the desired computer in the navigation pane, and click Create Access Rule in the tasks pane.
1. Name the access rule Essentials Agent, and click Next.
2. On the Rule Action page, select Allow and click Next.
3. In This rules applies to, select Selected protocols and click Add.
4. In the Add Protocols dialog box, click New, and then click Protocol.
5. In the New Protocol Definition Wizard, enter TCP 5723 (HealthService).
6. On the Primary Connection Information page, click New.
7. On the New/Edit Protocol Information page, enter 5723 both in the From and To boxes, and click OK.
8. On the Secondary Connections page, click Next and then click Finish.
9. In the Add Protocols dialog box, click New, and then click Protocol.
10. In the New Protocol Definition Wizard, enter TCP 8530 (UpdateServices).
11. On the Primary Connection Information page, click New.
12. On the New/Edit Protocol Information page, enter 8530 both in the From and To boxes, and click OK.
13. On the Secondary Connections page, click Next and then click Finish.
14. In the Add Protocols dialog box, click New, and then click Protocol.
15. In the New Protocol Definition Wizard, enter TCP 8531 (UpdateServices).
16. On the Primary Connection Information page, click New.
17. On the New/Edit Protocol Information page, enter 8531 both in the From and To boxes, and click OK.
18. On the Secondary Connections page, click Next and then click Finish.
19. In the Add Protocols dialog box, click New, and then click Protocol.
20. In the New Protocol Definition Wizard, enter TCP 51906 (AEM).
21. On the Primary Connection Information page, click New.
22. On the New/Edit Protocol Information page, enter 51906 both in the From and To boxes, and click OK.
23. On the Secondary Connections page, click Next and then click Finish.
24. On the Primary Connection Information page, click Next.
25. On the Secondary Connections page, click Next.
26. On the Completing the New Protocol Definition Wizard page, click Finish.
27. In the Add Protocols dialog box, expand the User-Defined folder, select TCP 5723 (HealthService), TCP 8530 (UpdateServices), TCP 8531 (UpdateServices) and TCP 51906 (AEM), and click Add.
28. Click Close to close the Add Protocols dialog box.
29. On the Protocols page of the New Access Rule wizard, click Next.
30. In the Access Rule Sources dialog box, click Add.
31. In the Add Protocols dialog box, expand the Networks folder, select Local Host, and click Add and then click Close.
32. On the Access Rule Destinations page of the New Access Rule wizard, click Next.
33. In the Add Network Entities dialog box, expand the Networks folder, select Internal and click Add and then click Close.
34. On the Access Rule Destinations page of the New Access Rule wizard, click Next.
35. In the User Sets dialog box, click Next.
36. On the Completing the New Access Rule Wizard page, click Finish.
37. Click Apply to save changes and update the configuration.
< Message edited by elmajdal -- 22.Mar.2008 12:38:21 PM >
_____________________________
Tarek Majdalani
MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8
|
|
My Subscription |
My Forums |
Address Book |
Member List |
Search |
FAQ |
Ticket List |
Log Out
Printable Version
Using ISA 2006 with SCE 2007 - 
New Messages
No New Messages
Hot Topic w/ New Messages
Hot Topic w/o New Messages
Locked w/ New Messages
Locked w/o New Messages
Post New Thread