RE: Remote assistance

From: "Deus, Attonbitus" <Thor@xxxxxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Date: Wed, 02 Jul 2003 08:58:16 -0700

At 08:37 AM 7/2/2003, you wrote:

Thanks! I haven't tested that feature through the ISA firewall. I guess
the most common scenario would be the "helper" is behind ISA and the
"helpee" is behind some sort of NAT device NOS (not otherwise
specified). In that type of scenario, the helpee would need to map 3389
to his internal address. Now, the big question is if the authentication
mechanism used by remote assistance works in this scenario.

Though I have not "published" RA myself either, preliminary research in that regard indicated that one could enable RA to an internal unit in the same way that one would publish internal Terminal Services. But, since RA would potentially require multiple internal machines, the ISA pub rule would have to be managed on a request-by-request basis. I don't allow RA requests to be generated from my workstations; however, I DO have RD setup for domain admins from within the organization for administrative reasons.

AFA NAT, you are correct- one would have to perform similar configurations for that to work. But, it is all within the "standard" TS model.

RE: Remote assistance

Other related posts: