Hi Stuart, It may in fact be that the app requires secondary connections. I can't vouch for the authors of the app, but it would make more sense to allow a single inbound port that the client and server can use to negotiate a secondary connection. Then the external client connects to the negotiate port designated as a secondary connection. But I'm not a coder so I can't imagine what goes on in these guys heads. Maybe they think its more secure to allow hundreds of primary connections to their app? Thanks! Tom Thomas W Shinder www.isaserver.org/shinder ISA Server and Beyond: http://tinyurl.com/1jq1 Configuring ISA Server: http://tinyurl.com/1llp -----Original Message----- From: Stuart Pittwood [mailto:SPittwood@xxxxxxxxxxxxxxxxx] Sent: Tuesday, October 21, 2003 8:22 AM To: [ISAserver.org Discussion List] Subject: [isalist] Re: Port Ranges http://www.ISAserver.org It's a progress application with the database, nameserver, broker, & agents (it's the agents that uses many ports). From what I understand, and I'm no progress expert, when a new connection is made to the database (to query, insert whatever) via webspeed it picks a port from a certain range and uses that port to communicate for the duration of that session. We have been told by the authors that the range is user definable but given the traffic levels we're expecting that it would impact performance if we were to shorten the pool to a more manageable length. Might be a pain in the ar*e at the moment but from what we've seen at other law firms it is an impressive piece of software. -----Original Message----- From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx] Sent: 21 October 2003 14:13 To: [ISAserver.org Discussion List] Subject: [isalist] Re: Port Ranges http://www.ISAserver.org Hi Stuart, I'm curious as to what application requires such as large number of primary connections. Thanks! Tom Thomas W Shinder www.isaserver.org/shinder ISA Server and Beyond: http://tinyurl.com/1jq1 Configuring ISA Server: http://tinyurl.com/1llp -----Original Message----- From: Stuart Pittwood [mailto:SPittwood@xxxxxxxxxxxxxxxxx] Sent: Tuesday, October 21, 2003 7:58 AM To: [ISAserver.org Discussion List] Subject: [isalist] Re: Port Ranges http://www.ISAserver.org Maybe this would be something MS should add? As it means that I have to now create 100 different protocol definitions. I know you can do this on a PIX (not sure about other firewalls) Anyways off to my isa server Thanks Jim -----Original Message----- From: Jim Harrison [mailto:jim@xxxxxxxxxxxx] Sent: 21 October 2003 13:49 To: [ISAserver.org Discussion List] Subject: [isalist] Re: Port Ranges http://www.ISAserver.org Not if you're referring to a collection of primary connections. What you need to do in this caase is create each individual protocol definition. If the protocol uses a single primary port and many secondary ports, then yes; a single definition can do the job. Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://isaserver.org/Jim_Harrison/ http://isatools.org Read the help / books / articles! On Tue, 21 Oct 2003 10:33:44 +0100 "Stuart Pittwood" <SPittwood@xxxxxxxxxxxxxxxxx> wrote: http://www.ISAserver.org Is it possible to create a protocol definition that contains a range of ports? lets say I wanted to publish a server on the following TCP ports 3202 to 3302 would I need to create 100 different protocol definitions? Regards Stu A full list of partners in Amery-Parkes is available for inspection at all of our offices. Information contained in this e-mail is intended for the use of the addressee only, and is confidential and may be the subject of Legal Professional Privilege. Any dissemination, distribution, copying or use this communication without prior permission of the addressee is strictly prohibited. The contents of an attachment to this email may contain software viruses which could damage your own computer system. Whilst Amery-Parkes has taken every reasonable precaution to minimise this risk, we do not accept liability for any damage which you sustain as a result of software viruses. You should carry out your own virus checks before opening any attachment to this email. ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^* All mail from this domain is virus-scanned with RAV. www.ravantivirus.com ^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^* ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: spittwood@xxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: spittwood@xxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')