RE: Firewall client exceptions

  • From: "Ted D" <tdoholis@xxxxxxxxxxxxx>
  • To: isalist@xxxxxxxxxxxxx
  • Date: Wed, 6 Apr 2005 11:50:43 -0600

Thanks Jim, 

I have read and checked out the Fwctool.exe utility and have a question
about the deployment of the new configuration.

Rather than copying the application.ini file to all the machines, or doing
something in a script, do you know any other way of distributing the
application.ini file to the all users folder and the individual folders
for each existing profile? Can it be placed on the ISA server for example
and have the client machines auto update themselves?

any advice is welcomed as otherwise I will have to do this manually and
maintaining it may be troublesome.

Thanks
TD


> Scan the help for "Advanced Firewall Client configuration file settings"
> 
> -------------------------------------------------------
>    Jim Harrison
>    MCP(NT4, W2K), A+, Network+, PCG
>    http://isaserver.org/Jim_Harrison/
>    http://isatools.org
>    Read the help / books / articles!
> -------------------------------------------------------
>  
> 
> -----Original Message-----
> From: Ted D [mailto:tdoholis@xxxxxxxxxxxxx] 
> Sent: Tuesday, April 05, 2005 17:36
> To: [ISAserver.org Discussion List]
> Subject: [isalist] Firewall client exceptions
> 
> http://www.ISAserver.org
> 
> Hi everyone
> 
> I have about 300 clients with all running the FWC. The engineering dept
> has a special app that makes use of the hosts file to contact a server
> for
> some information about the app and if it cant then the app doesnt start.
> 
> They also use FTP quite a bit so the FWC is a godsend to simplify the
> issue.
> 
> The problem is that the FWC remotes all the traffic including that from
> the special app and thus never sees the hosts file. I though about
> hosting
> a DNS zone but that causes other issues.
> 
> My question is how can I tell the FWC to not remote the traffic from
> this
> app? or does anyone have another suggestion?
> 
> I dont really want to tell them to disable it when they use the app then
> re-enable it. Further, I will eventually hide the icon while connected
> so
> they cant mess with it.
> 
> Thanks
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> jim@xxxxxxxxxxxx
> To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
> 
> All mail to and from this domain is GFI-scanned.


Other related posts: