Good point.... Was just showing that it can be easily done.... SR -----Original Message----- From: Steve Moffat [mailto:steve@xxxxxxxxxxxxxxx] Sent: Friday, June 07, 2002 12:29 PM To: [ISAserver.org Discussion List] Subject: RE: [isalist] Re: TSAC publish via ISA If i was you, i would change the port that TS is listening on to further enhance your security. Steve -----Original Message----- From: Cornerstone Christian School [mailto:ccschooltech@xxxxxxx] Sent: Fri 07/06/2002 04:26 PM To: [ISAserver.org Discussion List] Cc: Subject: [isalist] Re: TSAC publish via ISA http://www.ISAserver.org Lightly followed this link..... What we did was.... Step 1. Create a Protocol definition (TS IN) using Port # 3389 TCP Inbound Step 2. Create an IP Packet Filter Custom, Inbound, Fixed Port 3389, Remote Port All Step 3. Published the Server Used internal IP address for the server x.x.x.x, mapped to external IP of ISA server x.x.x.x and using Mapped Protocol TS IN (created in Step 1!) Works for us. Used the same idea for FTP server and SSH server. -----Original Message----- From: Jim Harrison [mailto:jim@xxxxxxxxxxxx] Sent: Friday, June 07, 2002 11:40 AM To: [ISAserver.org Discussion List] Subject: [isalist] Re: TSAC publish via ISA http://www.ISAserver.org The TSAC client has to be able to resolve the name you enter there. If it can't, no connection. Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://isaserver.org/authors/harrison/ Read the books! ----- Original Message ----- From: Rogers, Brian To: [ISAserver.org Discussion List] Sent: Friday, June 07, 2002 11:29 AM Subject: [isalist] Re: TSAC publish via ISA http://www.ISAserver.org I was at the beginning....the only way I could get it to work was to enter in the DNS name of the published IP address on the ISA server. Very odd :/ Brian W. Rogers MCSE, MCT, MCP Client/Server Network Developer Tree of Life Corporation rogersb@xxxxxxxxxxxxxx office: (904)940-2152 mobile: (904)806-7173 -----Original Message----- From: Jim Harrison [mailto:jim@xxxxxxxxxxxx] Sent: Friday, June 07, 2002 1:43 PM To: [ISAserver.org Discussion List] Subject: [isalist] Re: TSAC publish via ISA http://www.ISAserver.org Are you entering a server name in the UI? Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://isaserver.org/authors/harrison/ Read the books! ----- Original Message ----- From: Rogers, Brian To: [ISAserver.org Discussion List] Sent: Thursday, June 06, 2002 3:04 PM Subject: [isalist] TSAC publish via ISA http://www.ISAserver.org Ok, I followed the article posted in the learning zone and thought I had it configured properly. However whenever anyone attempts to connect to a terminal server after browsing to the TSAC login page, an immediate response of "Error connecting to terminal server" is returned. According to a KB article this error deals with name resolution. I have re-verified that 3389 is open...and the TSAC client works when you browse to it directly instead of through the firewall. Any ideas? :/ ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: rogersb@xxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: ccschooltech@xxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: steve@xxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')