Re: Question About allowing java apps
- From: "Jim Harrison" <jim@xxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Thu, 3 Oct 2002 09:01:48 -0700
You can find out by trying to use the app without the "proper settings" and
review the WEB and FW logs to see where the connection attempts were made.
If you find them in the WEB log, it's making proxy-style http connections,
but if it's in the FW log, it's a crapshoot, since the protocol prefix
(http, ftp. etc.) isn't known to the FW service; just an attempt to make a
TCP or UDP path through the ISA.
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://isaserver.org/pages/author_index.asp?aut=3
http://isatools.org
Read the books!
----- Original Message -----
From: "Greg Foulks" <greg.foulks@xxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Wednesday, October 02, 2002 7:50 PM
Subject: [isalist] Re: Question About allowing java apps
http://www.ISAserver.org
Jim,
I do not know how the Japp works... The company with the app told me what to
enable on my side of the firewall so I could make the connection.
----- Original Message -----
From: "Jim Harrison" <jim@xxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Wednesday, October 02, 2002 6:05 PM
Subject: [isalist] Re: Question About allowing java apps
> http://www.ISAserver.org
>
>
> Does the Japp (I love doing that) make HTTP requests or is it strictly
> Winsock (like Outlook Express for POP3)?
> I understand that the app runs in a browser session, <petpeeve>but that
> doesn't guarantee that it uses browser functionality </petpeeve>.
>
> Jim Harrison
> MCP(NT4, W2K), A+, Network+, PCG
> http://isaserver.org/pages/author_index.asp?aut=3
> http://isatools.org
> Read the books!
>
> ----- Original Message -----
> From: "Greg Foulks" <greg.foulks@xxxxxxxx>
> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
> Sent: Wednesday, October 02, 2002 9:55 AM
> Subject: [isalist] Re: Question About allowing java apps
>
>
> http://www.ISAserver.org
>
>
> Jim,
> It's client connecting to the java app is behind the ISA server and could
> either be a Firewall Client or NAT client. The app is
> connected via a web browser/http.
>
> Greg Foulks, MCP
> NewFound Technologies, Inc.
> http://www.nfti.com
> Email: greg.foulks@xxxxxxxx
> Voice: 614.318.5036
> Fax: 614.318.5005
>
>
> -----Original Message-----
> From: Jim Harrison [mailto:jim@xxxxxxxxxxxx]
> Sent: Wednesday, October 02, 2002 11:58 AM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] Re: Question About allowing java apps
>
>
> http://www.ISAserver.org
>
>
> The answer is "yes".
> I know, I know; that helps a lot.
> It depends on:
> 1. whether or not the app uses http or Winsock calls to make those
> connections
> 2. whether the app is running on a LAT client or on the ISA itself.
>
> Jim Harrison
> MCP(NT4, W2K), A+, Network+, PCG
> http://isaserver.org/pages/author_index.asp?aut=3
> http://isatools.org
> Read the books!
>
> ----- Original Message -----
> From: "Greg Foulks" <greg.foulks@xxxxxxxx>
> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
> Sent: Wednesday, October 02, 2002 6:52 AM
> Subject: [isalist] Question About allowing java apps
>
>
> http://www.ISAserver.org
>
>
> I have a site that I am trying to connect to that uses Java and I've been
> told to enable the following.
>
> Firewall Settings for Java Moderator Page:
> FIREWALL JAVA CONFIG
>
> TCP-IP Socket Numbers
> 80 for http
> 40001 for Java Applet
> 40002 for unsecured connections
> 40003 for secured connections.
>
>
> The question- Do I enable these as a IP Packet Filter or do I create
> Protocol Definitions and create a Protocol Rule?
>
> Thanks for all of your help.
>
> Greg Foulks, MCP
> NewFound Technologies, Inc.
> http://www.nfti.com
> Email: greg.foulks@xxxxxxxx
> Voice: 614.318.5036
> Fax: 614.318.5005
>
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Exchange Server Resource Site: http://www.msexchange.org/
> Windows Security Resource Site: http://www.windowsecurity.com/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> jim@xxxxxxxxxxxx
> To unsubscribe send a blank email to $subst('Email.Unsub')
>
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Exchange Server Resource Site: http://www.msexchange.org/
> Windows Security Resource Site: http://www.windowsecurity.com/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> greg.foulks@xxxxxxxx
> To unsubscribe send a blank email to $subst('Email.Unsub')
>
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Exchange Server Resource Site: http://www.msexchange.org/
> Windows Security Resource Site: http://www.windowsecurity.com/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> jim@xxxxxxxxxxxx
> To unsubscribe send a blank email to $subst('Email.Unsub')
>
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Exchange Server Resource Site: http://www.msexchange.org/
> Windows Security Resource Site: http://www.windowsecurity.com/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
greg.foulks@xxxxxxxx
> To unsubscribe send a blank email to $subst('Email.Unsub')
>
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
Other related posts:
