Windows Vista Forums

Sbs 2003 with ISA2004

  1. #1


    Kevin Guest

    Sbs 2003 with ISA2004

    ISA 2004 question: How can I configure port forwarding in ISA2004
    Need to have MyDomainName.com:8001 to forward to 192.168.16.5 in order to
    see internal webcamera via out side the domain.
    Thank you...

      My System SpecsSystem Spec

  2. #2


    Ace Fekay [MCT] Guest

    Re: Sbs 2003 with ISA2004

    "Kevin" <Kevin@newsgroup> wrote in message
    news:91ABA165-F685-44C9-BB29-6C0B9FCA0BE4@newsgroup

    > ISA 2004 question: How can I configure port forwarding in ISA2004
    > Need to have MyDomainName.com:8001 to forward to 192.168.16.5 in order to
    > see internal webcamera via out side the domain.
    > Thank you...
    That's a question best for the ISA group, unless someone of course in SBS
    will want to walk you through it.

    I cross-posted it to the following groups. Just check back here for
    responses.
    microsoft.public.isa
    microsoft.public.isa.configuration,


    --
    Ace

    This posting is provided "AS-IS" with no warranties or guarantees and
    confers no rights.

    Please reply back to the newsgroup or forum for collaboration benefit among
    responding engineers, and to help others benefit from your resolution.

    Ace Fekay, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE & MCSA
    2003/2000, MCSA Messaging 2003
    Microsoft Certified Trainer

    For urgent issues, please contact Microsoft PSS directly. Please check
    http://support.microsoft.com for regional support phone numbers.




      My System SpecsSystem Spec

  3. #3


    Robbin Meng [MSFT] Guest

    RE: Sbs 2003 with ISA2004



    Hi Kevin,

    Thanks for your post and Ace's input. It's nice to cross-post this issue in ISA newsgroup : )

    Just for your reference, web publishing rules map incoming requests to the appropriate Web servers behind the ISA Server computer. This can be done by "Publish a Web
    Server" via Firewall Policy. Please refer to the below articles for detailed steps:

    Publishing Web Servers Using ISA Server 2004
    http://technet.microsoft.com/en-us/l.../cc302545.aspx

    How to Configure an ISA Server 2004 Firewall on Small Business Server for System Center Essentials(please refer to the "To publish the WSUS Web server" part)
    http://technet.microsoft.com/en-us/l.../bb422892.aspx

    Hope this helps. Also, if you have any questions or concerns, please do not hesitate to let me know.



    Best regards,
    Robbin Meng(MSFT)
    Microsoft Online Newsgroup Support

    ==================================================================
    Please post your SBS 2008 related questions to the SBS newsgroup on Connect website:
    https://connect.microsoft.com/sbs08/...i/default.aspx

    Please post your EBS related questions to the EBS newsgroup on Connect website:
    https://connect.microsoft.com/ebs08/...i/default.aspx

    If you want to use a newsreader other than a web forum to access these newsgroups,
    please refer to the following blog to apply NNTP password and configure a newsreader:
    http://msmvps.com/blogs/bradley/arch...ewsgroups.aspx
    ==================================================================
    When responding to posts, please "Reply to Group" via your newsreader so
    that others may learn and benefit from your issue.
    ==================================================================
    This posting is provided "AS IS" with no warranties, and confers no rights.
    ==================================================================




      My System SpecsSystem Spec

  4. #4


    Phillip Windell Guest

    Re: Sbs 2003 with ISA2004

    There is no such thing as Port Forwarding,..it is a meaninless Marketing
    "invented" term. What it really is,..is Reverse NAT or also called Static
    NAT.

    But even with that being so it is the wrong approach with ISA. With ISA you
    want Reverse-Web-Proxying.
    In the ISA "world" it is called: "Web Publishing"

    Everything I say below is important,...don't "blow it off".

    1. The Camera Device needs to operate as a SecureNAT Client of the ISA.
    This means it either uses the ISA as its Default Gateway, or the LAN Routing
    Design passes it to ISA "along-the-way" to get to the Internet.

    2. Create the Web Publishng Rule after reading the documentation first. You
    will publish camera1.mydomain.com (not camera1.mydomain.com:8001) to be sent
    to 192.168.16.5

    3. After the Publishing Rule is created go into the Bridging Tab in the
    Properties of the Rule and set the:
    "Redirect requests to HTTP port: 8001"

    The user will not specify the port,...they will only ask for
    http://camera1.mydomain.com . The ISA will redirect to 8001 transparently

    I strongly suggest you come up with a valid unique public DNS name for this
    that is meaningfull,...like a Host Record called "camera1". When the FQDN
    is built from that with the Zone name it becomes "camera1.mydomain.com"

    Then in the To Tab in the properties of the rule make sure it says......
    "This rule applies to this published site: camera1.mydomain.com"

    Make sure it also says "camera1.mydomain.com" in the Public Name Tab of the
    publshing Rule

    Also on the To Tab in the properties of the rule,..look at the last item.
    If request appear to come from the original Client, then the Web
    Server/Device must be a SecureNAT Client of the ISA. But if it is set to
    requests appear to come from the ISA then the Web Server/Device does not
    have to be a SecureNAT Client of the ISA, however you will loose the record
    keeping ability to know what IP the user came from since it will look like
    the source was always the ISA. That is probably not a problem with a Camera
    Device, but can be important with a real web site where record keeping and
    other site functionality might be more important.

    By doing it this way you can run a gazillion HTTP web sites off of the same
    External IP and same External Port 80 all at the same time. The actual FQDN
    (aka HostsHeader) is what distinguishes one site from another.

    --
    Phillip Windell

    The views expressed, are my own and not those of my employer, or Microsoft,
    or anyone else associated with me, including my cats.
    -----------------------------------------------------
    Technet Library
    ISA2004
    http://technet.microsoft.com/en-us/l...chNet.10).aspx
    ISA2006
    http://technet.microsoft.com/en-us/l...chNet.10).aspx

    Understanding the ISA 2004 Access Rule Processing
    http://www.isaserver.org/articles/IS...cessRules.html

    Troubleshooting Client Authentication on Access Rules in ISA Server 2004
    http://download.microsoft.com/downlo...7/ts_rules.doc

    Microsoft Internet Security & Acceleration Server: Partners
    http://www.microsoft.com/isaserver/p...s/default.mspx

    Microsoft ISA Server Partners: Partner Hardware Solutions
    http://www.microsoft.com/forefront/e...epartners.mspx
    -----------------------------------------------------




    "Ace Fekay [MCT]" <aceman@newsgroup> wrote in message
    news:eDRPw9JYKHA.3428@newsgroup

    > "Kevin" <Kevin@newsgroup> wrote in message
    > news:91ABA165-F685-44C9-BB29-6C0B9FCA0BE4@newsgroup

    >> ISA 2004 question: How can I configure port forwarding in ISA2004
    >> Need to have MyDomainName.com:8001 to forward to 192.168.16.5 in order
    >> to
    >> see internal webcamera via out side the domain.
    >> Thank you...
    >
    > That's a question best for the ISA group, unless someone of course in SBS
    > will want to walk you through it.
    >
    > I cross-posted it to the following groups. Just check back here for
    > responses.
    > microsoft.public.isa
    > microsoft.public.isa.configuration,
    >
    >
    > --
    > Ace
    >
    > This posting is provided "AS-IS" with no warranties or guarantees and
    > confers no rights.
    >
    > Please reply back to the newsgroup or forum for collaboration benefit
    > among responding engineers, and to help others benefit from your
    > resolution.
    >
    > Ace Fekay, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE & MCSA
    > 2003/2000, MCSA Messaging 2003
    > Microsoft Certified Trainer
    >
    > For urgent issues, please contact Microsoft PSS directly. Please check
    > http://support.microsoft.com for regional support phone numbers.
    >
    >
    >


      My System SpecsSystem Spec

Sbs 2003 with ISA2004

Similar Threads
Thread Forum
Website with sbs2003r2 Premium sp2 and isa2004 sp3, error 403
Website publishing with sbs2003 r2 Premium sp 2 and isa 2004 sp3, all the latest updates applied HELP! HELP! HELP! Despite having gone through...
SBS Server
Cannot access Internet after installing ISA2004 on SBS 2003 R2
Hi I've a clean install of SBS 2003 R2 Premium on a box with two NIC's configured as follows: Windows IP Configuration Host Name . . . ....
SBS Server
SBS2003 + ISA2004 + iPhone query
An accountant friend of mine has an SBS 2003 Premium server with ISA 2004. He also has an iPhone. He has two broadband lines at his home...
SBS Server
SBS2003 + ISA2004 Internet Connection Wizard errors
Having issues with a site that want to use iPhones with Exchange ActiveSync, we've loaded a new SSL certificate and OWA is fine but Microsoft...
SBS Server
Re: After Installing SBS 2003 SP1 and Windows 2003 SP2 HP server gets slow in morning and users can't login
Sorry I did install Exchange SP2. The SBS BPA gave errors about setting TCP/IP settings in the registry. I did this but still has the problem. ...
SBS Server
After Installing SBS 2003 SP1 and Windows 2003 SP2 HP server gets slow in morning and users can't login
I followed all the readme files in installing SP2 on a SBS2003 server. Installed SBS SP1, Windows SP1, Exchange SP1 and Windows SP2. Followed all...
SBS Server
VPN Stops all of sudden in Vista to ISA2004
I adjusted my MTU setting and all seemed to be ok. Now I have a new symptom. My VPN connects and works for a while then after some time (maybe a...
Vista networking & sharing