Oh the clients are using firewall clients, without it thy cannot use msn voice and video. But we still have this rule in policy elements > protocol definitions, where we have a particular port range parameter set to open some 65k ports. Do we really need this parameter set or will voice and video work without this port range parameter? Sachin Vaish Vaioni Group Limited t: 0870 160 0650 f: 0870 160 0651 http://www.vaioni.com 32 Leslie Hough Way Manchester M6 6AJ -----Original Message----- From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx] Sent: 01 May 2003 00:49 To: [ISAserver.org Discussion List] Subject: [isalist] RE: MSN messenger voice and video http://www.ISAserver.org Hi Sachin, OK, so it's the same as its always been :) You just need to install the Firewall client on the clients and then create an "all open" protocol rule. Note that the machine behind the ISA Server will not be able to initiate the call, and the external client MUST NOT be behind a NAT. HTH, Tom Thomas W Shinder www.isaserver.org/shinder ISA Server and Beyond: http://tinyurl.com/1jq1 Configuring ISA Server: http://tinyurl.com/1llp -----Original Message----- From: Sachin Vaish (VGL) [mailto:sachin.vaish@xxxxxxxxxx] Sent: Wednesday, April 30, 2003 2:49 AM To: [ISAserver.org Discussion List] Subject: [isalist] RE: MSN messenger voice and video http://www.ISAserver.org Well we only want to support the latest version which is 5.x. No the clients behind the ISA Server cannot initiate the call. The user outside the ISA Server has to make the first call. We haven't tested if it works if both users are behind a NAT Server. I assume it won't work. But do we need to include these 65,000 dynamic ports in the config? Regards Sachin Vaish Vaioni Group Limited t: 0870 160 0650 f: 0870 160 0651 http://www.vaioni.com 32 Leslie Hough Way Manchester M6 6AJ -----Original Message----- From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx] Sent: 30 April 2003 01:00 To: [ISAserver.org Discussion List] Subject: [isalist] RE: MSN messenger voice and video http://www.ISAserver.org Hi Sachin, What version of Messenger do you support? Are the Messenger clients able to initiate a call when they are behind the ISA Server and the machine they are calling is also behind a NAT server? I'd love to see how they handled that issue. Thanks! Tom Thomas W Shinder www.isaserver.org/shinder ISA Server and Beyond: http://tinyurl.com/1jq1 Configuring ISA Server: http://tinyurl.com/1llp -----Original Message----- From: sachin vaish [mailto:sachin.vaish@xxxxxxxxxx] Sent: Tuesday, April 29, 2003 2:39 AM To: [ISAserver.org Discussion List] Subject: [isalist] MSN messenger voice and video http://www.ISAserver.org Hi everyone, We have voice and video for MSN messenger working within our network. We use firewall clients that allow this to happen. We had to outsource this expertise, but are glad we now have it. We have noticed a rule has been set within ISA to use the 65k dynamic ports to pass this voice or video traffic, which can compromise security. Now obviously the ISA "expert" thinks it is required, but wanted to ask a wider audience. Do we need to have this within our protocol rules and IP packet Filters to get these two services working within MSN messenger or could we do without them? Sachin ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Exchange Server Resource Site: http://www.msexchange.org/ Windows Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Exchange Server Resource Site: http://www.msexchange.org/ Windows Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: sachin.vaish@xxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Exchange Server Resource Site: http://www.msexchange.org/ Windows Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Exchange Server Resource Site: http://www.msexchange.org/ Windows Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: sachin.vaish@xxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')