RE: Opening "Protocols"

  • From: "Chris H" <ntpro@xxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Wed, 9 Jun 2004 14:04:02 -0400

Some consultants are connecting to a Cisco VPN 3500 and we then have it hubbed into a "dmz" with the ISA external NIC in the hub as well. So they are VPN to the Cisco device and then I assume normal networking from there through the ISA to the SAP server behind the ISA


[Cisco - 192.168.200.201] <---> [Hub]<--->[ISA External NIC - 192.168.200.184]
[ISA Server Internal NIC - 10.49.9.7] <--->[SAP Server - 10.49.2.184]


Chris

----- Original Message ----- From: "Quillman Shawn (RBNA/CSA1) *" <Shawn.Quillman@xxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Wednesday, June 09, 2004 1:29 PM
Subject: [isalist] RE: Opening "Protocols"



http://www.ISAserver.org


Those are tunneling protocols. Are you just trying to connect to the SAP server or are you trying to set up some sort of VPN tunnel to it / through to it?

-Shawn

-----Original Message-----
From: Chris H [mailto:ntpro@xxxxxxxxxx]
Sent: Wednesday, June 09, 2004 1:01 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Opening "Protocols"

http://www.ISAserver.org

I am trying to allow access to an SAP server through the ISA firewall
and
was told I need to allow "protocols" 51 (AH), 50 (ESP) and 500 (ISAKMP).

My question is how to define the packet filters? Does the port #
correspond
to the protocol #? TCP or UDP? I have tried looking it up but cannot
find a
definitive answer . . .

Much thanks!

Chris


------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: shawn.quillman@xxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as: ntpro@xxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist




Other related posts: