From: Boise, ID, USA
Thoght I'd check to see if anyone might have a possible solution for me. I'm currently publishing an internal printer to the Internet through ISA 2004. The client adds a TCPIP printer on their PC, using the IP address we're publishing...and voila...that external PC can use or internal printer.
What we're trying to accomplish is to be able to have customers and vendors that come onto our guest wireless network have access to that printer 'automatically'....without the cumbersome process of adding the TCPIP printer on their client...mainly as a convenience for the user. Anyone have sugggestions on how we might accomplish this? I'm quite certain that it's not an ISA issue at all...but thought maybe somebody out there may have similar needs of easily supplying a printer to folks not on our network....easily... easily.
My first thought and for “what its worth” comment is keep the “guests” of the internal network and hang another printer on the guest network. Nowadays printers are relatively a cheap purchase so why risk compromise of the internal network. As far as the automatic requirement, it would be depended on what protocol (LPR, RAW, SMB, SNMP ) and the manufacture. Most HP printers will advertise their presence but that is also dependent on the client; if it’s configured to discover, if the firewall will allow access and do they have the proper driver installed. I do something similar on my guest network by providing Windows and Unix based printing services for our non-windows guests. Drivers are provided automatically but there is still need for some intervention. I would not recommend publishing externally, it would be too risky.
David Melvin Ohio MCSE: Security 2003, MCSA:Security 2003
From: Boise, ID, USA
Thanks. Initially in this project, we'd allow access via ISA publishing to just a small set of IP addresses, those that are doled out to folks getting on our guest wireless access point. I do think that hanging a printer off of our guest network seems simple, cheap, and effective...but see a challenge of printers drivers.