The script just adds the registry keys right?  Or is there something else that it adds etc?  What is the difference if I make them manually please?  To be honest I prefer doing things on my own than with the help of scripts etc (where possible) since I can understand more what is happening etc :)

Regards,

Correct, but you shouldn't do it by "hand".

-------------------------------------------------------

Jim Harrison

MCP(NT4, W2K), A+, Network+, PCG

Read the help / books / articles!

-------------------------------------------------------

-----Original Message-----

Sent: Friday, November 19, 2004 06:27

To: [ISAserver.org Discussion List]

Subject: [isalist] RE: SSL over custom Port / Not Standard

Hi Jim,

you mean i should make 2 entries for each port?

i.e.

msFPCTunnelLowPort 443

msFPCTTunnelHighPort 443

msFPCTunnelLowPort 6969

msFPCTTunnelHighPort 6969

Like this it should allow only ssl on these 2 particular ports? Am I on the correct path?

Thanks.

Regards,

Nick holmes

--- "Jim Harrison" <Jim@xxxxxxxxxxxx> wrote:

From: "Jim Harrison" <Jim@xxxxxxxxxxxx>

Date: Fri, 19 Nov 2004 06:10:27 -0800

To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>

Subject: [isalist] RE: SSL over custom Port / Not Standard

That happens because you entered 443-6969.

Only enter the ports you know you need.

Jim Harrison

MCP(NT4, W2K), A+, Network+, PCG

Read the help / books / articles!

-----Original Message-----

Sent: Friday, November 19, 2004 1:15 AM

To: [ISAserver.org Discussion List]

Subject: [isalist] RE: SSL over custom Port / Not Standard

Hi,

solution worked :) Tahnks..

edited the registry manually.

Though , another question, just for cuiriosity. Like this ISA will allow SSL traffice from port 443 up to port 6969. Is there a way not to allow this but just ssl traffic only on those 2 specific ports?

Regards,

Nick Holmes.

--- "Ara" <ara@xxxxxxxxxx> wrote:

From: "Ara" <ara@xxxxxxxxxx>

Date: Thu, 18 Nov 2004 10:47:21 -0500

To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>

Subject: [isalist] RE: SSL over custom Port / Not Standard

Hello

________________________________

Sent: November 18, 2004 10:38 AM

To: [ISAserver.org Discussion List]

Subject: [isalist] SSL over custom Port / Not Standard

Hi, I have an SSL webpage running on port 10000 (not on the standard

port 443), which is on the internet. I want to access it from my

network (from behind ISA 2004). Gave my machine access on all protocols

and all locations. I even specified port 6969 as a user defined

protocol. Though when i try to access this site through isa server 2004

I get this error. Any idea please?

Network Access Message: The page cannot be displayed

Technical Information (for Support personnel)

* Error Code: 502 Proxy Error. The specified Secure Sockets Layer

(SSL) port is not allowed. ISA Server is not configured to allow SSL

requests from this port. Most Web browsers use port 443 for SSL

requests. (12204)

* IP Address: XXX.XXX.XXX.XXX

* Date: 11/18/2004 3:36:29 PM

Regards,

Nick Holmes

________________________________

Free, simple, fast, memorable email

------------------------------------------------------

------------------------------------------------------

Other Internet Software Marketing Sites:

------------------------------------------------------

You are currently subscribed to this ISAserver.org Discussion List as:

ara@xxxxxxxxxx

Report abuse to listadmin@xxxxxxxxxxxxx

------------------------------------------------------

------------------------------------------------------

Other Internet Software Marketing Sites:

------------------------------------------------------

You are currently subscribed to this ISAserver.org Discussion List as:

nick_holmes@xxxxxxxxxxxxxxxx

Report abuse to listadmin@xxxxxxxxxxxxx

________________________________

Free, simple, fast, memorable email

------------------------------------------------------

------------------------------------------------------

Other Internet Software Marketing Sites:

------------------------------------------------------

You are currently subscribed to this ISAserver.org Discussion List as:

jim@xxxxxxxxxxxx

Report abuse to listadmin@xxxxxxxxxxxxx

All mail to and from this domain is GFI-scanned.

------------------------------------------------------

------------------------------------------------------

Other Internet Software Marketing Sites:

------------------------------------------------------

You are currently subscribed to this ISAserver.org Discussion List as: nick_holmes@xxxxxxxxxxxxxxxx

Report abuse to listadmin@xxxxxxxxxxxxx

________________________________

Free, simple, fast, memorable email

------------------------------------------------------

------------------------------------------------------

Other Internet Software Marketing Sites:

------------------------------------------------------

You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx

Report abuse to listadmin@xxxxxxxxxxxxx

All mail to and from this domain is GFI-scanned.

------------------------------------------------------

------------------------------------------------------

Other Internet Software Marketing Sites:

------------------------------------------------------

You are currently subscribed to this ISAserver.org Discussion List as: robert@xxxxxxx

Report abuse to listadmin@xxxxxxxxxxxxx