RE: MSN Videos

  • From: "Ball, Dan" <DBall@xxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Mon, 21 Nov 2005 22:14:35 -0500

Here's what I did:
- Created a custom protocol, TCP port 80 outbound, made sure NO
application filters were applied to it.
- Created a firewall policy for that protocol, placed it ahead of the
normal Web Access policy, from anyone internal, destination
video.msn.com.
- Ensured video.msn.com was listed in the Web Browser tab of the Network
properties.
- Tested: No worky...

What steps did I miss?

-----Original Message-----
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx] 
Sent: Sunday, November 20, 2005 10:25 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: MSN Videos

http://www.ISAserver.org

Hi Dan,

What I would try is to unbind the Web proxy filter from the HTTP
protocol and configure the required sites for Direct Access.

This should enable the clients to bypass the all Web filters, since they
won't be going through the Web proxy filter for the Direct Access sites.

HTH,
Tom

Thomas W Shinder, M.D.
Site: www.isaserver.org
Blog: http://spaces.msn.com/members/drisa/
Book: http://tinyurl.com/3xqb7
MVP -- ISA Firewalls
**Who is John Galt?**

 

> -----Original Message-----
> From: Ball, Dan [mailto:DBall@xxxxxxxxxxx] 
> Sent: Saturday, November 19, 2005 8:47 PM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: MSN Videos
> 
> http://www.ISAserver.org
> 
> Damn, just when I'm starting to get somewhere he takes off!  I tried
> taking the proxy settings out of WMP, and now I don't get a prompt, it
> just tells me the video is inaccessible...
> 
> Tom, I've been playing around a bit with custom protocols, trying to
> find a way to produce a firewall policy that doesn't use the 
> SurfControl
> filter, can you think of a way?
> 
> -----Original Message-----
> From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx] 
> Sent: Friday, November 18, 2005 4:21 PM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: MSN Videos
> 
> http://www.ISAserver.org
> 
> I'm still trying to beat the WMP folks into submission on this.
> Try this - change all the WMP "proxy" settings to "no proxy", 
> close WMP
> and then retry the links... 
> 
> 
> -------------------------------------------------------
>    Jim Harrison
>    MCP(NT4, W2K), A+, Network+, PCG
>    http://isaserver.org/Jim_Harrison/
>    http://isatools.org
>    Read the help / books / articles!
> -------------------------------------------------------
>  
> 
> -----Original Message-----
> From: Ball, Dan [mailto:DBall@xxxxxxxxxxx] 
> Sent: Friday, November 18, 2005 12:30
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: MSN Videos
> 
> http://www.ISAserver.org
> 
> 
> That doesn't explain why some clips work and some don't though...  Jim
> pointed out in his last message that SurfControl overrides any of my
> attempts at direct access, so I need to find a way around this...
> 
>  
> 
> ________________________________
> 
> From: Edgardo Balansay [mailto:balansay@xxxxxxxxx]
> Sent: Friday, November 18, 2005 2:30 PM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: MSN Videos
> 
>  
> 
> http://www.ISAserver.org 
> 
> Hello,
> 
>  
> 
> Sorry for my earlier doubts :), it works now too as well.  
> After adding
> msn.com for Direct Access the videos play perfectly after the
> commercials as well.  Remember to refresh the FWC by clicking "Detect
> Now" as well. 
> 
>  
> 
> Dan, is your DNS setup well?  If adding msn.com for Direct Access does
> not work, maybe some DNS settings are awry?
> 
>  
> 
> Thanks all, goodbye!
> 
> Edgardo
> 
>  
> 
> (no surfcontrol installed, but contemplating McAfee ISA Security
> Shield...)
> 
> ------------------------------------------------------ List Archives:
> http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server
> Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server
> FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------ Visit
> TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------ You 
> are currently
> subscribed to this ISAserver.org Discussion List as: dball@xxxxxxxxxxx
> To unsubscribe visit 
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> jim@xxxxxxxxxxxx To unsubscribe visit
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx 
> 
> All mail to and from this domain is GFI-scanned.
> 
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> dball@xxxxxxxxxxx
> To unsubscribe visit 
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion 
> List as: tshinder@xxxxxxxxxxxxxxxxxx
> To unsubscribe visit 
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
> 
> 

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
dball@xxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx


Other related posts: