Welcome to ISAserver.org

skype on ISA 2004

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> SecureNAT Client >> skype on ISA 2004

Page: [1] 2 next > >>

Message

<< Older Topic Newer Topic >>

skype on ISA 2004 - 21.Feb.2005 12:08:00 PM

jazzer

Posts: 24
Joined: 15.Feb.2004
From: Switzerland
Status: offline

Hello all,

i have found a post for ISA 2000 and Skype.

http://forums.isaserver.org/ultimatebb.cgi?ubb=get_topic;f=2;t=012772

Have anybody experience with this configuration on ISA 2004?

Thanks for any Answer.

Post #: 1

Featured Links*

RE: skype on ISA 2004 - 21.Feb.2005 1:14:00 PM

tshinder

Posts: 47439
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Jazzer,

I haven't worked out the details, but if you have an all open rules and the Firewall client installed (and you should *always* install the Firewall client on workstations), it works a treat.

HTH,
Tom

(in reply to jazzer)

Post #: 2

RE: skype on ISA 2004 - 21.Feb.2005 2:11:00 PM

jazzer

Posts: 24
Joined: 15.Feb.2004
From: Switzerland
Status: offline

Hi Tom,

what you mean with "all open rules" of the ISA. I think an "all open rules" of the ISA is like a Swiss "Emmentaler" cheese.
You mean i should make a
Role from Lan to External with all Ports open and then Installing the Firewall Client of the Internal Clients?

Thanks for a exactly Answer.

S. Thoma

(in reply to jazzer)

Post #: 3

RE: skype on ISA 2004 - 28.Feb.2005 10:52:00 PM

petenel

Posts: 28
Joined: 15.Mar.2002
From: Netherlands
Status: offline

Hi Tom,

I tried using Tom Shindler suggestion to install SKYPE.
Off course that didn't work after installation, so I looked on the forum for a solution.
I thought I found one in the article from the next link: http://forums.isaserver.org/ultimatebb.cgi?ubb=get_topic;f=2;t=012772
Here is described how to configure the necessary protocol rules and web publishing rules. I configured it as stated. Tom's suggestion was also to use the ISA firewall client. I didn't until now, but I have installed the FWC. However, I am using the standard configuration, and sofar SKYPE is not working at all so far.
I am using a standard ISA 2000 server on W2K, and the clients are with Windows XP SP2. As one off the administrators, I am allowed to use all Internet Protocols. Do I have to add any settings in Firewall Configuration to make this work? Please help!

(in reply to jazzer)

Post #: 4

RE: skype on ISA 2004 - 1.Mar.2005 2:19:00 PM

tshinder

Posts: 47439
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Petenel,

You are incorrect. If you create an "all open" Access Rule, and install the firewall client, it will work. I know, because I use it everyday [Big Grin]

HTH,
Tom

(in reply to jazzer)

Post #: 5

RE: skype on ISA 2004 - 2.Mar.2005 9:04:00 PM

jsun9

Posts: 41
Joined: 13.Mar.2002
Status: offline

Tom, do know how can I connect multiple users to Skype?

(in reply to jazzer)

Post #: 6

RE: skype on ISA 2004 - 4.Mar.2005 2:19:00 AM

tshinder

Posts: 47439
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi J,

Good question. I didn't know there was a problem with multiple users. Are you having problems with that?

Thanks!
Tom

(in reply to jazzer)

Post #: 7

RE: skype on ISA 2004 - 4.Mar.2005 11:39:00 PM

jsun9

Posts: 41
Joined: 13.Mar.2002
Status: offline

Well, it seems like any existing user can log on sporadically at best. But, new users cannot create an account and log on. I keep getting the error #1102. I've opened up all necessary ports, but nothing seems to work. I cannot use the FWC as the users are mobile and would rather not have it installed on there system.

(in reply to jazzer)

Post #: 8

RE: skype on ISA 2004 - 9.Mar.2005 5:15:00 PM

jsun9

Posts: 41
Joined: 13.Mar.2002
Status: offline

I gave in and installed the FWC just to see if I could connect and I still cannot.

Tom, what do you mean by an "all open rules" ?

(in reply to jazzer)

Post #: 9

RE: skype on ISA 2004 - 11.Mar.2005 2:39:00 PM

tshinder

Posts: 47439
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Jsun,

An all open rule allow all traffic outbound for anyone. You have to make sure you put this on top of all other rules.

HTH,
Tom

(in reply to jazzer)

Post #: 10

RE: skype on ISA 2004 - 18.Mar.2005 1:11:00 AM

jsun9

Posts: 41
Joined: 13.Mar.2002
Status: offline

Tom, it's my understanding that having an "All Open" rule or "Allow All Outgoing" rule effectively lets anyone use any outbound service they wish? This includes all misc. programs including viruses that wish to do the same. Is this rule just for Skype? Or, are you talking everything under the sun?

Also, just for the record, I was able to connect without the firewall client using the rules specified in topic #012772. Only thing I had to do that wasn't in the directions was to specificy port 65530 in Skype's properties.

(in reply to jazzer)

Post #: 11

RE: skype on ISA 2004 - 21.Mar.2005 9:31:00 PM

bernbird

Posts: 1
Joined: 21.Mar.2005
Status: offline

hi,

i am having an issue now with installing skype.

i am behind ISA server, please help a newcomer.

i have administrative rights on the machine and server.

thanks.

i am sorry i am starting from the beginnning but i know nothing about it yet. please help.

(in reply to jazzer)

Post #: 12

RE: skype on ISA 2004 - 22.Mar.2005 1:17:00 PM

amitk8

Posts: 1
Joined: 22.Mar.2005
Status: offline

Hi All,

Download the latest version of Skype (ver 2.0 Beta) and install it. This works with the settings specified in the article #012772.
I've got this working using ver 2.0 of Skype.

Amit Kumar
Innovatif Data Technologies
Pune, India

(in reply to jazzer)

Post #: 13

RE: skype on ISA 2004 - 8.Apr.2005 10:05:00 AM

phlim2001

Posts: 11
Joined: 8.Apr.2005
Status: offline

i only managed to download Version: 1.2.0.41 which released on 6 Apr 2005.

Where can i download v2.0 ?

Any ideas on how to configure Skype for ISA 2004?

I followed the steps from http://forums.isaserver.org/ultimatebb.cgi?ubb=get_topic;f=2;t=012772

1st rule at Firewall Policy.
I have created the server publishing rule, where the from/listener column i put External&All Network and for the To column, I put external IP address of my ISA 2004 Server.

2nd rule.
I created the rule whereby allowed the Protocol (which i created based on http://forums.isaserver.org/ultimatebb.cgi?ubb=get_topic;f=2;t=012772 )and allowed from Internal to External for all users.

Under the Skype Option, I keyin 65530 as incoming and choosed SOCKS5, keyin my proxy Internal IP with port 8080, and also enable proxy authentication.

But I still can't login to Skype.

Any ideas?

(in reply to jazzer)

Post #: 14

RE: skype on ISA 2004 - 13.Apr.2005 11:24:00 AM

cancee

Posts: 26
Joined: 13.Apr.2005
From: KSA ( Saudi Arabia )
Status: offline

How i open the yahoo voice chat behind the ISA 2000 ,or how i brake the ISA CLIENT FIREWALL.

Please post details,

Regards,

Hammad cancee@gmail.com

(in reply to jazzer)

Post #: 15

RE: skype on ISA 2004 - 13.Apr.2005 1:36:00 PM

tshinder

Posts: 47439
Joined: 10.Jan.2001
From: Texas
Status: offline

Hey guys,

If you want to use Skype, make sure the firewall client is installed on the client device.

HTH,
Tom

(in reply to jazzer)

Post #: 16

RE: skype on ISA 2004 - 13.Apr.2005 3:27:00 PM

Rickymag

Posts: 509
Joined: 26.Nov.2003
From: SA
Status: offline

I have noticed without the FW client my skype does not work properly and only one clinet can connect etc.

once FWC is installed all works well.

SKYPE me [Smile]

(in reply to jazzer)

Post #: 17

RE: skype on ISA 2004 - 29.Apr.2005 7:49:00 AM

Sunny.C

Posts: 800
Joined: 5.Apr.2005
From: sydney
Status: offline

is this software a secruity risky?? i mean if you have all ports open for internal clients isn't this dangerous?

(in reply to jazzer)

Post #: 18

RE: skype on ISA 2004 - 29.Apr.2005 4:41:00 PM

Sunny.C

Posts: 800
Joined: 5.Apr.2005
From: sydney
Status: offline

skype is running for me without no firewall client of any rules open other than the http,https,ftp for internal. I have read up that it should work with proxy but the qaulity of the voice will be reduced due to the ports being blocked. Still is this software any secruity threat?

(in reply to jazzer)

Post #: 19

RE: skype on ISA 2004 - 1.May2005 7:37:00 PM

Rickymag

Posts: 509
Joined: 26.Nov.2003
From: SA
Status: offline

I believe the known security issues with the software have been addressed, However no software can be 100% guaranteed to be secure as it operates in the highest ring level of the software models meaning the complexity is great and there are many layers below it that need to traversed to reach the inner secure layers. Further more you have users that use the software miss-configuring components and opening up themselves for attack.

To cut a long story short I use skype and have not found it to be problematic or insecure. I practice good security fundamentals and mechanisms and ensure that critical data is backed up and that antivirus is installed and that very important files are encrypted and password protected etc etc.

Just my thoughts

HTH

RM

(in reply to jazzer)

Post #: 20