RE: Firewall client exceptions

  • From: "Jim Harrison" <Jim@xxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Wed, 6 Apr 2005 11:19:12 -0700

Hi Ted,

The point of that help reference was to show you how to use the Firewall
Client Application Settings functionality in the ISA MMC.
You can add specific application settings right at the ISA and they will
apply to all clients equally.

-------------------------------------------------------
   Jim Harrison
   MCP(NT4, W2K), A+, Network+, PCG
   http://isaserver.org/Jim_Harrison/
   http://isatools.org
   Read the help / books / articles!
-------------------------------------------------------
 
-----Original Message-----
From: Ted D [mailto:tdoholis@xxxxxxxxxxxxx] 
Sent: Wednesday, April 06, 2005 10:51
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Firewall client exceptions

http://www.ISAserver.org

Thanks Jim, 

I have read and checked out the Fwctool.exe utility and have a question
about the deployment of the new configuration.

Rather than copying the application.ini file to all the machines, or
doing
something in a script, do you know any other way of distributing the
application.ini file to the all users folder and the individual folders
for each existing profile? Can it be placed on the ISA server for
example
and have the client machines auto update themselves?

any advice is welcomed as otherwise I will have to do this manually and
maintaining it may be troublesome.

Thanks
TD


> Scan the help for "Advanced Firewall Client configuration file
settings"
> 
> -------------------------------------------------------
>    Jim Harrison
>    MCP(NT4, W2K), A+, Network+, PCG
>    http://isaserver.org/Jim_Harrison/
>    http://isatools.org
>    Read the help / books / articles!
> -------------------------------------------------------
>  
> 
> -----Original Message-----
> From: Ted D [mailto:tdoholis@xxxxxxxxxxxxx] 
> Sent: Tuesday, April 05, 2005 17:36
> To: [ISAserver.org Discussion List]
> Subject: [isalist] Firewall client exceptions
> 
> http://www.ISAserver.org
> 
> Hi everyone
> 
> I have about 300 clients with all running the FWC. The engineering
dept
> has a special app that makes use of the hosts file to contact a server
> for
> some information about the app and if it cant then the app doesnt
start.
> 
> They also use FTP quite a bit so the FWC is a godsend to simplify the
> issue.
> 
> The problem is that the FWC remotes all the traffic including that
from
> the special app and thus never sees the hosts file. I though about
> hosting
> a DNS zone but that causes other issues.
> 
> My question is how can I tell the FWC to not remote the traffic from
> this
> app? or does anyone have another suggestion?
> 
> I dont really want to tell them to disable it when they use the app
then
> re-enable it. Further, I will eventually hide the icon while connected
> so
> they cant mess with it.
> 
> Thanks
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> jim@xxxxxxxxxxxx
> To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
> 
> All mail to and from this domain is GFI-scanned.

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx

All mail to and from this domain is GFI-scanned.



Other related posts: