Welcome to ISAserver.org

VNC Help

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 General ] >> General >> VNC Help

Page: [1]

Message

<< Older Topic Newer Topic >>

VNC Help - 13.Jul.2005 6:01:00 PM

mrhunters

Posts: 17
Joined: 20.Jun.2005
Status: offline

Is there a procedure I need to follow in 2004 to allow VNC access on my network? As well as remote desktop?

Its ok if its all open for the time being... im shutting it off after he connects.

Post #: 1

Featured Links*

RE: VNC Help - 14.Jul.2005 9:37:00 AM

tshinder

Posts: 47663
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi S,

Where is the VNC client?

Where is the ISA firewall?

Where is the VNC server?

Thanks!
Tom

(in reply to mrhunters)

Post #: 2

RE: VNC Help - 14.Jul.2005 10:56:00 AM

mrhunters

Posts: 17
Joined: 20.Jun.2005
Status: offline

the vnc client is on a different subnet from mine.
for example we are 192.168.3.x he is 192.168.4.x

the ISA firewall (internal 192.168.3.204, external 205) is sitting behind our router (192.168.3.1)

we connect through ISA (204) as our Default Gateway

The VNC server is on the .3 subnet. I can connect from the .3 subnet no problem but he cannot from the .4 subnet.

I can ping his computer he cannot ping mine... He does not have his firewall turned on.

The default gateway on the VNC server box is (3.204)

Is there a system policy or firewall policy I need to setup?

Thanks for your help.
Hope I gave enough info.

[Frown]

ps
Just bought your book..... 2 thumbs UP! Got us up and running in under a day! I still have edit a whole bunch but THANKS FOR SUCH A GREAT BOOK!

[ July 14, 2005, 10:59 AM: Message edited by: S ]

(in reply to mrhunters)

Post #: 3

RE: VNC Help - 14.Jul.2005 1:30:00 PM

mrhunters

Posts: 17
Joined: 20.Jun.2005
Status: offline

vnc server ---- ISA ---- Router ---- ISP ---- Router----vnc viewer

KEY
vnc viewer 192.168.3.200
DG 192.168.3.204

ISA internal 192.168.3.204
external 192.168.3.205 DG 192.168.3.1

Router 192.168.3.1

Internet

Router 192.168.4.1

VNC Viewer 192.168.4.x

[ July 18, 2005, 08:13 AM: Message edited by: S ]

(in reply to mrhunters)

Post #: 4

RE: VNC Help - 14.Jul.2005 1:48:00 PM

mrhunters

Posts: 17
Joined: 20.Jun.2005
Status: offline

got it....
have to publish the server and have it accept port 5900 on inbound....

very smart isa.....very smart

(in reply to mrhunters)

Post #: 5

RE: VNC Help - 16.Jul.2005 7:08:00 AM

mrhunters

Posts: 17
Joined: 20.Jun.2005
Status: offline

check that! it didnt work. Now he cant connect again. [Mad]

(in reply to mrhunters)

Post #: 6

RE: VNC Help - 16.Jul.2005 9:01:00 AM

DakineAthon

Posts: 13
Joined: 1.Jul.2005
From: Fresno, CA.
Status: offline

We had a similar issue a couple months ago on our new subnet.

We had to create a Static Route in order to make communications happen. Then ISA Server 2004 had to be configured to allow communications.

(in reply to mrhunters)

Post #: 7

RE: VNC Help - 16.Jul.2005 9:30:00 AM

LLigetfa

Posts: 2184
Joined: 10.Aug.2004
From: fort frances.on.ca
Status: offline

First off, there is probably some untold pieces. Between the subnets and the internet, is there a VPN or NAT?

Second, on the viewer side, the subnet looks all wrong. The viewer, the ISA internal and external, and the router appear to all be in the same subnet!

(in reply to mrhunters)

Post #: 8

RE: VNC Help - 18.Jul.2005 7:54:00 AM

mrhunters

Posts: 17
Joined: 20.Jun.2005
Status: offline

that is correct, They are all on the same subnet.
This portion is out of my control. Our office only gets alotted one subnet throughout the company.
Do you have some suggestions?

Thanks.
Still no VNC access at this point.

quote:
We had to create a Static Route in order to make communications happen. Then ISA Server 2004 had to be configured to allow communications.

I dont have access to the router as well so creating a static route might be difficult...
VNC worked between subnets before installation of the isa server and it still does if I bybass it and just use the router as the default gateway. Therefore I have to assume its an ISA configuration problem. There MUST be something in there that needs to be edited. ??? [Confused]

[ July 18, 2005, 08:18 AM: Message edited by: S ]

(in reply to mrhunters)

Post #: 9

RE: VNC Help - 18.Jul.2005 9:06:00 AM

LLigetfa

Posts: 2184
Joined: 10.Aug.2004
From: fort frances.on.ca
Status: offline

quote:
that is correct, They are all on the same subnet.

Then you have a pretty useless ISA server. Get another subnet!

In the meantime, all you can do is to bypass the ISA server.

(in reply to mrhunters)

Post #: 10

RE: VNC Help - 18.Jul.2005 12:36:00 PM

mrhunters

Posts: 17
Joined: 20.Jun.2005
Status: offline

are you saying there is no way to tell ISA to allow VNC connections from another subnet?

(in reply to mrhunters)

Post #: 11

RE: VNC Help - 22.Jul.2005 10:45:00 AM

kwyjibo

Posts: 6
Joined: 14.Jul.2005
From: Melbourne Australia
Status: offline

VNC through ISA is certainly possible, but the way you have your network configured makes the ISA server irrelevant.
ISA server is supposed to NAT or route between different subnets. If you have the internal and external interfaces on the same subnet as you have done, all the user needs to do is change their default gateway to the real default gateway for the subnet and they have effectively bypassed any security that the ISA server is supposed to provide.
I would worry about that issue before I even started looking at the VNC problem.

(in reply to mrhunters)

Post #: 12

RE: VNC Help - 22.Jul.2005 3:00:00 PM

mrhunters

Posts: 17
Joined: 20.Jun.2005
Status: offline

im not specifically worried about that since we go through our corporate firewall anyway...
Im more concerned with just using it as a proxy for the time being.

I know, overkill, but it what we have.

(in reply to mrhunters)

Post #: 13

RE: VNC Help - 23.Jul.2005 1:02:00 PM

kwyjibo

Posts: 6
Joined: 14.Jul.2005
From: Melbourne Australia
Status: offline

If that's all you want to use it for, just set it up as a proxy and set your web browser to point to it.
Leave your default gateway in your IP settings as your real gateway and VNC will work fine.

(in reply to mrhunters)

Post #: 14