RE: MSN Videos

  • From: "Thomas W Shinder" <tshinder@xxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Mon, 21 Nov 2005 21:16:49 -0600

Are these machines also firewall clients?

Thomas W Shinder, M.D.
Site: www.isaserver.org
Blog: http://spaces.msn.com/members/drisa/
Book: http://tinyurl.com/3xqb7
MVP -- ISA Firewalls
**Who is John Galt?**

 

> -----Original Message-----
> From: Ball, Dan [mailto:DBall@xxxxxxxxxxx] 
> Sent: Monday, November 21, 2005 9:15 PM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: MSN Videos
> 
> http://www.ISAserver.org
> 
> Here's what I did:
> - Created a custom protocol, TCP port 80 outbound, made sure NO
> application filters were applied to it.
> - Created a firewall policy for that protocol, placed it ahead of the
> normal Web Access policy, from anyone internal, destination
> video.msn.com.
> - Ensured video.msn.com was listed in the Web Browser tab of 
> the Network
> properties.
> - Tested: No worky...
> 
> What steps did I miss?
> 
> -----Original Message-----
> From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx] 
> Sent: Sunday, November 20, 2005 10:25 AM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: MSN Videos
> 
> http://www.ISAserver.org
> 
> Hi Dan,
> 
> What I would try is to unbind the Web proxy filter from the HTTP
> protocol and configure the required sites for Direct Access.
> 
> This should enable the clients to bypass the all Web filters, 
> since they
> won't be going through the Web proxy filter for the Direct 
> Access sites.
> 
> HTH,
> Tom
> 
> Thomas W Shinder, M.D.
> Site: www.isaserver.org
> Blog: http://spaces.msn.com/members/drisa/
> Book: http://tinyurl.com/3xqb7
> MVP -- ISA Firewalls
> **Who is John Galt?**
> 
>  
> 
> > -----Original Message-----
> > From: Ball, Dan [mailto:DBall@xxxxxxxxxxx] 
> > Sent: Saturday, November 19, 2005 8:47 PM
> > To: [ISAserver.org Discussion List]
> > Subject: [isalist] RE: MSN Videos
> > 
> > http://www.ISAserver.org
> > 
> > Damn, just when I'm starting to get somewhere he takes off!  I tried
> > taking the proxy settings out of WMP, and now I don't get a 
> prompt, it
> > just tells me the video is inaccessible...
> > 
> > Tom, I've been playing around a bit with custom protocols, trying to
> > find a way to produce a firewall policy that doesn't use the 
> > SurfControl
> > filter, can you think of a way?
> > 
> > -----Original Message-----
> > From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx] 
> > Sent: Friday, November 18, 2005 4:21 PM
> > To: [ISAserver.org Discussion List]
> > Subject: [isalist] RE: MSN Videos
> > 
> > http://www.ISAserver.org
> > 
> > I'm still trying to beat the WMP folks into submission on this.
> > Try this - change all the WMP "proxy" settings to "no proxy", 
> > close WMP
> > and then retry the links... 
> > 
> > 
> > -------------------------------------------------------
> >    Jim Harrison
> >    MCP(NT4, W2K), A+, Network+, PCG
> >    http://isaserver.org/Jim_Harrison/
> >    http://isatools.org
> >    Read the help / books / articles!
> > -------------------------------------------------------
> >  
> > 
> > -----Original Message-----
> > From: Ball, Dan [mailto:DBall@xxxxxxxxxxx] 
> > Sent: Friday, November 18, 2005 12:30
> > To: [ISAserver.org Discussion List]
> > Subject: [isalist] RE: MSN Videos
> > 
> > http://www.ISAserver.org
> > 
> > 
> > That doesn't explain why some clips work and some don't 
> though...  Jim
> > pointed out in his last message that SurfControl overrides any of my
> > attempts at direct access, so I need to find a way around this...
> > 
> >  
> > 
> > ________________________________
> > 
> > From: Edgardo Balansay [mailto:balansay@xxxxxxxxx]
> > Sent: Friday, November 18, 2005 2:30 PM
> > To: [ISAserver.org Discussion List]
> > Subject: [isalist] RE: MSN Videos
> > 
> >  
> > 
> > http://www.ISAserver.org 
> > 
> > Hello,
> > 
> >  
> > 
> > Sorry for my earlier doubts :), it works now too as well.  
> > After adding
> > msn.com for Direct Access the videos play perfectly after the
> > commercials as well.  Remember to refresh the FWC by 
> clicking "Detect
> > Now" as well. 
> > 
> >  
> > 
> > Dan, is your DNS setup well?  If adding msn.com for Direct 
> Access does
> > not work, maybe some DNS settings are awry?
> > 
> >  
> > 
> > Thanks all, goodbye!
> > 
> > Edgardo
> > 
> >  
> > 
> > (no surfcontrol installed, but contemplating McAfee ISA Security
> > Shield...)
> > 
> > ------------------------------------------------------ List 
> Archives:
> > http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server
> > Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server
> > FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------ Visit
> > TechGenix.com for more information about our other sites:
> > http://www.techgenix.com
> > ------------------------------------------------------ You 
> > are currently
> > subscribed to this ISAserver.org Discussion List as: 
> dball@xxxxxxxxxxx
> > To unsubscribe visit 
> > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > Report abuse to listadmin@xxxxxxxxxxxxx
> > 
> > ------------------------------------------------------
> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Visit TechGenix.com for more information about our other sites:
> > http://www.techgenix.com
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org 
> Discussion List as:
> > jim@xxxxxxxxxxxx To unsubscribe visit
> > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > Report abuse to listadmin@xxxxxxxxxxxxx 
> > 
> > All mail to and from this domain is GFI-scanned.
> > 
> > 
> > ------------------------------------------------------
> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Visit TechGenix.com for more information about our other sites:
> > http://www.techgenix.com
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org 
> Discussion List as:
> > dball@xxxxxxxxxxx
> > To unsubscribe visit 
> > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > Report abuse to listadmin@xxxxxxxxxxxxx
> > 
> > ------------------------------------------------------
> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Visit TechGenix.com for more information about our other sites:
> > http://www.techgenix.com
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org Discussion 
> > List as: tshinder@xxxxxxxxxxxxxxxxxx
> > To unsubscribe visit 
> > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > Report abuse to listadmin@xxxxxxxxxxxxx
> > 
> > 
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> dball@xxxxxxxxxxx
> To unsubscribe visit 
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion 
> List as: tshinder@xxxxxxxxxxxxxxxxxx
> To unsubscribe visit 
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
> 
> 


Other related posts: