I work in a helpdesk environment, we only want to use ISA to block internet access to certain websites and block all internet to certain users. That is setup and working fine.
However, The helpdesk users often use FTP, Telnet, SSH, and RDP to connect to customer's site and work. I have create access rules to allow these protocols. However, they are not working.
My questions are.
1. IS there a way to setup the ISA (2006) to not worry about the listed protocols. (bypass and let end to end communcations) 2. If not, how should these be setup besides the obivious rules I have in place.
In my error logs I am getting the following for ssh and telnet: 0x0 ERROR_SUCCES then after 60 sec 0xc0040038 FWX_E_TCP_NO_SERVER_REPLY
We use putty for ssh programs, and a program called PRocomm for telnet connections. Putty does have a tab for proxy settings, procomm does not. We use IE for FTP connections
We are secure. This is all behind our Cisco ASA appliance. I am not using this as a true "firewall". I'm only using this for a proxy to limit internet access to users. I'm not interested in anything else it does. It is working just fine.
Check www.secunia.com and compare the bugs in the ASA compared to ISA. ISA is much more secure than an ASA and I personally don't consider the ASA to be secure until Cisco gets some better understanding of what's happening above layer 3.