RE: ISAserver.org - ISA Firewall Quick Tip: Blocking MSN Messenger Access through the ISA Firewall while Enabling Access to Some Users

  • From: "Amy Babinchak" <amy@xxxxxxxxxxxxxxxxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Tue, 7 Mar 2006 15:22:13 -0500

That's how I do it. There are no site-to-site VPN's in my command.
(well, with the exception of the one I just had to setup between a
client and Ford, but we had no choice but to comply with their rules.)
But I see a lot of others choosing that route because they want to just
extend the existing network to those sites and don't want to
troubleshoot the VPN connection for an individual PC. Makes some sense,
but many of the DSL routers provided by ISP don't support multiple VPN
tunnels or allow a very small number of them - like 2 at a time. I
really prefer Terminal server myself.

Amy
 
Harbor Computer Services
Small Business Computer Specialists

Client Blog: http://smalltechnotes.blogspot.com/
Tech Blog: http://isainsbs.blogspot.com/
Website: http://www.harborcomputerservices.net/
 

 

-----Original Message-----
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx] 
Sent: Tuesday, March 07, 2006 11:55 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: ISAserver.org - ISA Firewall Quick Tip: Blocking
MSN Messenger Access through the ISA Firewall while Enabling Access to
Some Users

http://www.ISAserver.org

Hi Amy,

For this kind of deployment, where there are no branch office servers,
why not just use remote access VPN connections instead of site to site
VPN? Its far more simple, and you can get around network numbering
collisions  by assigning the VPN clients an "unusual" off subnet address
space. 

Maybe this is a subject for another "quick tip"?

Tom 


Thomas W Shinder, M.D.
Site: www.isaserver.org
Blog: http://blogs.isaserver.org/shinder/
Book: http://tinyurl.com/3xqb7
MVP -- ISA Firewalls


-----Original Message-----
From: Amy Babinchak [mailto:amy@xxxxxxxxxxxxxxxxxxxxxxxxxx] 
Sent: Tuesday, March 07, 2006 10:50 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: ISAserver.org - ISA Firewall Quick Tip: Blocking
MSN Messenger Access through the ISA Firewall while Enabling Access to
Some Users

http://www.ISAserver.org

A lot of my small business are expanding into additional small offices
rather than increasing the number of folks at the main office too. It's
a new phenomena created by remote web workplace and OWA. Business owners
enjoy the remote work capabilities and decide to put a couple of folks
in a small office across town instead of adding another desk at the main
office. SBS2003 launched a revolution in small businesses; I'm calling
them webs instead of multi-site enterprises. For example, I have one
client with 6 people in the main office, 15 people working from home, 2
people in two other offices and a home office from which all bookkeeping
and a secondary business is run out of. I have them all using Citrix; we
specify the anti-virus software they have to use and then we don't worry
about them. The difference is, I think, that these remote offices
usually don't have servers at them. The small biz world is going with
adding a terminal server or site-to-site VPN and not installing a server
at the remote office. They are usually just sitting behind the DSL
router with minimal firewall capabilities and using it as the VPN end
point as well.

Amy
 
Harbor Computer Services
Small Business Computer Specialists
 
Client Blog: http://smalltechnotes.blogspot.com/
Tech Blog: http://isainsbs.blogspot.com/
Website: http://www.harborcomputerservices.net/
 

 

-----Original Message-----
From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx] 
Sent: Tuesday, March 07, 2006 9:33 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: ISAserver.org - ISA Firewall Quick Tip: Blocking
MSN Messenger Access through the ISA Firewall while Enabling Access to
Some Users

http://www.ISAserver.org

Why shouldn't they be interested in multi-site articles?
That's the core of the SBS/R2 discussion that I have to squash weekly.

-----Original Message-----
From: Amy Babinchak [mailto:amy@xxxxxxxxxxxxxxxxxxxxxxxxxx] 
Sent: Tuesday, March 07, 2006 5:56 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: ISAserver.org - ISA Firewall Quick Tip: Blocking
MSN Messenger Access through the ISA Firewall while Enabling Access to
Some Users

http://www.ISAserver.org

Just that it's something that will be of interest to them as opposed to
the recent string of multi-site, back-to-back config articles.

Amy
 
Harbor Computer Services
Small Business Computer Specialists
 
Client Blog: http://smalltechnotes.blogspot.com/
Tech Blog: http://isainsbs.blogspot.com/
Website: http://www.harborcomputerservices.net/
 

 

-----Original Message-----
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx] 
Sent: Tuesday, March 07, 2006 8:49 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: ISAserver.org - ISA Firewall Quick Tip: Blocking
MSN Messenger Access through the ISA Firewall while Enabling Access to
Some Users

http://www.ISAserver.org

??? 


Thomas W Shinder, M.D.
Site: www.isaserver.org
Blog: http://blogs.isaserver.org/shinder/
Book: http://tinyurl.com/3xqb7
MVP -- ISA Firewalls


-----Original Message-----
From: Amy Babinchak [mailto:amy@xxxxxxxxxxxxxxxxxxxxxxxxxx] 
Sent: Tuesday, March 07, 2006 7:46 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: ISAserver.org - ISA Firewall Quick Tip: Blocking
MSN Messenger Access through the ISA Firewall while Enabling Access to
Some Users

http://www.ISAserver.org

What's this an SBS article?

Amy
 
Harbor Computer Services
Small Business Computer Specialists
 
Client Blog: http://smalltechnotes.blogspot.com/
Tech Blog: http://isainsbs.blogspot.com/
Website: http://www.harborcomputerservices.net/
 

 
-----Original Message-----
From: ISAserver.org [mailto:info@xxxxxxxxxxxxx] 
Sent: Tuesday, March 07, 2006 7:52 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] ISAserver.org - ISA Firewall Quick Tip: Blocking MSN
Messenger Access through the ISA Firewall while Enabling Access to Some
Users

http://www.ISAserver.org

ISAserver.org - RealTime Article Update

Hi ISAlist,



Title: ISA Firewall Quick Tip: Blocking MSN Messenger Access through the
ISA Firewall while Enabling Access to Some Users
Author: Thomas Shinder
Summary: In this article we'll go over the following procedures: Create
the HTTP/HTTPS Access Rule to Deny Access to MSN Messenger; Configure
the User Group Exception and the HTTP Security Filter on the Deny Rule;
Create the Allow Rule for the Excepted Users.
Link:
http://www.ISAserver.org/tutorials/ISA-Firewall-Quick-Tip-Blocking-MSN-M
essenger-Access-Enabling-Access-Some-Users.html





Visit the Subscription Management
(http://newsletter.isoftmarketing.com/) section to unsubscribe.
ISAserver.org is in no way affiliated with Microsoft Corp.
For sponsorship information, contact us at advertising@xxxxxxxxxxxxx

Copyright (c) ISAserver.org 2006. All rights reserved.


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
amy@xxxxxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx



------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
amy@xxxxxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx

All mail to and from this domain is GFI-scanned.


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
amy@xxxxxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx



------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
amy@xxxxxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx


Other related posts: