[isalist] Re: Ports for video calls

  • From: Jim Harrison <Jim@xxxxxxxxxxxx>
  • To: "isalist@xxxxxxxxxxxxx" <isalist@xxxxxxxxxxxxx>
  • Date: Tue, 31 Mar 2009 08:37:12 -0700

http://www.ISAserver.org
-------------------------------------------------------

This is SIP (STUN gave it away).
CIL...

-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On 
Behalf Of Rob Moore
Sent: Tuesday, March 31, 2009 7:00 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: Ports for video calls

http://www.ISAserver.org
-------------------------------------------------------
  
Sure, such as they are.

What he says is:
VidyoPortal Specific Ports utilized
Inbound TCP Port 2222 ssh, Server Maintenance (Internal Use Only, DO NOT open 
public)Inbound TCP Port 80 Web Access to VidyoPortal

Inbound TCP Port 443 Secure Web Access to VidyoPortal
[Jim] - possible Web publishing rule; may have to be server publishing if the 
"portal" isn't using valid HTTP

Inbound TCP Port 10000 Client Connection to VidyoPortal Application Server
[Jim] - server publishing again

Inbound TCP Port 50000 Client Connection to VidyoRouter
[Jim] - server publishing again

UDP 50,000-65,535 Media feeds to/from participants (6 ports per participant)
NOTE: At this time the VidyoPortal Opens all UDP ports dynamically based on STUN
communication between Client and Server so there is no need to open specific UDP
ports on the firewall as long as ports in this range can be dynamically opened.
[Jim] -Like I said; ISA doesn't support SIP, so it can't dynamically manage 
these ports

Inbound TCP Port 3306 Middleware DB Port on VidyoPortal
(only needed open if supporting external standalone VidyoRouter(s) across 
NAT/FW)
[Jim] - server publishing again

UDP Timeout Change from Default (i.e. 0:02:00 2 minutes) to something larger 
(i.e. 3:00:00 - 3 hrs)
[Jim] - ROTFLMFAO!!! Not only no, but HELL no.  This is blazingly, 
irretrievably, glactically stupid in the extreme. Was this VoIP app designed by 
game developers?

Thanks,
Rob

-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On 
Behalf Of Jim Harrison
Sent: Tuesday, March 31, 2009 9:55 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: Ports for video calls

http://www.ISAserver.org
-------------------------------------------------------
  
The UDP port script is for use with the UDP update we shipped in support of 
MS08-007 (DNS updates).
"openport" is pretty meaningless (as I'm sure you're aware).
Any chance you can share the details?


-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On 
Behalf Of Rob Moore
Sent: Tuesday, March 31, 2009 6:33 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Ports for video calls

http://www.ISAserver.org
-------------------------------------------------------
  
Hello all-

Running ISA 2006 SP1 on Windows 2003 Standard R2 SP2.

We are testing out a video conference system ("Vidyo"). The testers are having 
problems with dropped calls and whatnot, and the Vidyo people have given me a 
list of ports to "open." (Including two pages of Cisco PIX commands, though 
I've told them we have an ISA server.) There are a few TCP ports that need to 
have an access rule. Then there is a large range of UDP ports that need access 
(50,000 to 65,535). I haven't done any work with UDP ports on ISA before. Do I 
have to use a script to define those ports, like I do with TCP, before I create 
the rule? (I looked at isatools.org and saw something called "UDP Update Port 
Exclusion Tool." That doesn't really sound right, but is it what I need?)

Also, the Vidyo people said I should change the UDP Timeout to something like 
three hours. Is that something I can do on ISA? How?

Thanks,
Rob

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Rob Moore
Network Manager
215-241-7870
Help Desk: 800-500-AFSC



------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/  
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp 
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/ 
ISA Server Blogs: http://blogs.isaserver.org/ 
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com 
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp 
Report abuse to listadmin@xxxxxxxxxxxxx 


------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/  
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp 
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/ 
ISA Server Blogs: http://blogs.isaserver.org/ 
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com 
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp 
Report abuse to listadmin@xxxxxxxxxxxxx 

------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/  
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp 
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/ 
ISA Server Blogs: http://blogs.isaserver.org/ 
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com 
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp 
Report abuse to listadmin@xxxxxxxxxxxxx 


------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx

Other related posts: