Welcome to ISAserver.org

Server publish with ALL ports open?

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Publishing] >> Server Publishing >> Server publish with ALL ports open?

Page: [1]

Message

<< Older Topic Newer Topic >>

Server publish with ALL ports open? - 13.Jul.2009 2:45:06 PM

espsgroup

Posts: 16
Joined: 11.May2007
Status: offline

Hello,

Our provider is requiring us to open up all ports to our internal servers to support backups. They use BackupExec and apparently are unable to specify a range of ports to use. We have 3 servers published behind our ISA server each with their own unique public IP (all separate IPs bound on ISA) and also unique internal IPs (for the servers themselves).

They say we need to open up ALL ports to these IPs from their backup network in order for the backup agents to work.

This really seems wrong to me for some reason but they are insisting that it is so. I have tried to specify a custom Protocol in ISA that covered ports 1-65535 but this resulting in pretty much crashing the ISA server. It was unable to open any TCP connections anymore.

Is there a better way to do this or am I (or are they?) completely missing something?

Thanks,
ESP

Post #: 1

Featured Links*

RE: Server publish with ALL ports open? - 13.Jul.2009 4:52:36 PM

paulo.oliveira

Posts: 3472
Joined: 3.Jan.2008
From: Amazon, Brazil
Status: offline

Hi,

maybe they don�t know how to configure BackupExec software:

http://www.backupexecfaq.com/articles/using/backing-up-microsoft-isa-server-2004.html

Also found this: Backup EXEC Issue with ISA Server 2006

Regards,
Paulo Oliveira.

< Message edited by paulo.oliveira -- 13.Jul.2009 5:10:40 PM >

_____________________________

Microsoft Premier Field Engineer (PFE)
Blog: http://poliveirasilva.wordpress.com/
Twitter: https://twitter.com/poliveirasilva

(in reply to espsgroup)

Post #: 2

RE: Server publish with ALL ports open? - 13.Jul.2009 4:53:27 PM

pwindell

Posts: 2244
Joined: 12.Apr.2004
From: Taylorville, IL
Status: offline

Ain't....never....gonna....happen.

You have to publish "something",....you can't publish "anything".

If this provider is worth paying money to,...they would have a Client Application that ran on your boxes and initiated an outbound connection to the provider to establish a connection to do the "backup" over.

What they are asking you to do is absolutely rediculas,...and I am almost ready to say "imcompetent" of them.

_____________________________

Phillip Windell

(in reply to espsgroup)

Post #: 3