• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

application on isa

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA 2006 General] >> General >> application on isa Page: [1]
Login
Message << Older Topic   Newer Topic >>
application on isa - 28.Jan.2008 9:13:46 AM   
sigi9009

 

Posts: 15
Joined: 27.Nov.2007
Status: offline
hallo forum,

i have installed an isa 2006 server on my machine which i also use for a proprietary application.
internet access is needed to an external server, i didnīt know on which port .
so i started to monitor which port is used by the application - its 3540.
so i set up a rule which allowes from localhost to external on port 3540 tcp outbound but there is no match for this rule. instead the last standard rule is matched.

where could be the problem?
one thing i see is that i just allow port 3540, not saying if this is source or destination port. for sure its destination but i cant define it anywhere.

thanks for help
Post #: 1
RE: application on isa - 28.Jan.2008 10:26:53 AM   
abqtech

 

Posts: 216
Joined: 9.Mar.2004
Status: offline
You may want to create an "allow all" rule, start a monitor on your ISA Server to watch the connections.  Start your application so that it makes the connection to the remote host.  Stop the application, and the stop the trace and review what connections were used (to see what's missing.)  Disable or delete the allow all rule.  Then create a new rule to allow the access, and see if the new rule allows this applicaiton, to connect as needed.

I would never recommend leaving an allow all rule in place, but in this case, creating a temporary "allow all" rule is a decent way to see all the connections that this application  requires.

Furthermore you may want to create the allow all rule and only apply the destination IP or FDQN, rather than applying External.

(in reply to sigi9009)
Post #: 2
RE: application on isa - 30.Jan.2008 8:28:00 AM   
sigi9009

 

Posts: 15
Joined: 27.Nov.2007
Status: offline
thats a really good idea i will try this

thanks

(in reply to sigi9009)
Post #: 3
RE: application on isa - 30.Jan.2008 9:16:46 AM   
abqtech

 

Posts: 216
Joined: 9.Mar.2004
Status: offline
your welcome and happy troubleshooting to ya  !

(in reply to sigi9009)
Post #: 4

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA 2006 General] >> General >> application on isa Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts