RE: Using ISA Server 2004 Network Templates to Automatically Create Access Policy: The Edge Firewall Template

  • From: "Greg Mulholland" <gmulholland@xxxxxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Tue, 17 Feb 2004 10:50:47 +1100

not really, im still trying to get my head around letting a certain isp
computer have access to the firewall on a "non defined" inbound port.
 

Greg Mulholland
http://www.isaserver.org <http://www.isaserver.org/> 
http://isatools.org <http://isatools.org/> 
http://groups.google.com <http://groups.google.com/>  

 

________________________________

From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx] 
Sent: Tuesday, February 17, 2004 10:40 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Using ISA Server 2004 Network Templates to
Automatically Create Access Policy: The Edge Firewall Template


http://www.ISAserver.org

Hi Greg,
 
You can't add anything to the system policy, but you can remove stuff.
 
Actually, I guess you can add stuff, in that when you perform certain
actions, like enabling the VPN clients network, the disabled VPN system
policy rule becomes enabled. 
 
Do you want to place some rules that have a higher priority than the
system policy rules?
 
Thanks!
Tom

________________________________

From: Greg Mulholland [mailto:gmulholland@xxxxxxxxxxxxxxx] 
Sent: Monday, February 16, 2004 4:57 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Using ISA Server 2004 Network Templates to
Automatically Create Access Policy: The Edge Firewall Template


http://www.ISAserver.org

Yeah but you cant actually add anything to the system policy can you?
 

Greg Mulholland
http://www.isaserver.org <http://www.isaserver.org/> 
http://isatools.org <http://isatools.org/> 
http://groups.google.com <http://groups.google.com/>  

 

________________________________

From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx] 
Sent: Tuesday, February 17, 2004 9:48 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Using ISA Server 2004 Network Templates to
Automatically Create Access Policy: The Edge Firewall Template


http://www.ISAserver.org

Hi Greg,
 
The default setup has no policies, just the default rule that blocks all
access through any of the firewall interfaces.
 
If you use a Network Template, you're offered the opportunity to
configure the "Network" object(s), and then pick a Firewall Policy that
will create a list of Access Rules, based on the Firewall Policy you
select.
 
Maybe you're thinking about the Firewall System Policy, which is set by
default and hidden from the interface unless you want explicitly view
that policy. You can change the behavior of some of the system policy
rules with this version, by right clicking the Firewall Policies node
and clicking the Edit System Policy option.
 
HTH,
Tom
 
Thomas W Shinder
www.isaserver.org/shinder <http://www.isaserver.org/shinder> 
ISA 2004 Beta - Get it now!
http://www.microsoft.com/isaserver/beta/default.asp
<http://www.microsoft.com/isaserver/beta/default.asp> 
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp
<http://tinyurl.com/1llp> 

 

        -----Original Message-----
        From: Greg Mulholland [mailto:gmulholland@xxxxxxxxxxxxxxx] 
        Sent: Monday, February 16, 2004 3:43 PM
        To: [ISAserver.org Discussion List]
        Subject: [isalist] RE: Using ISA Server 2004 Network Templates
to Automatically Create Access Policy: The Edge Firewall Template
        
        
        http://www.ISAserver.org
        
        Tom i've got a question for you. With regards to ISA 2004. Am i
right in saying if you use the default setup you cannot change or edit
the contents of the predefined policy, but if you create it from one of
the templates then you must create it.
         
        Maybe im confusing the issue. What i am really talking about is
the predefined rules setup to block stuff to the ISA, can they be edited
or added too at all. 
         

        Greg Mulholland
        http://www.isaserver.org <http://www.isaserver.org/> 
        http://isatools.org <http://isatools.org/> 
        http://groups.google.com <http://groups.google.com/>  

         

________________________________

        From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx] 
        Sent: Tuesday, February 17, 2004 12:16 AM
        To: [ISAserver.org Discussion List]
        Subject: [isalist] Using ISA Server 2004 Network Templates to
Automatically Create Access Policy: The Edge Firewall Template
        
        
        http://www.ISAserver.org
        

        Using ISA Server 2004 Network Templates to Automatically Create
Access Policy: The Edge Firewall Template:
http://www.msfirewall.org/isa2004/2004edgefirewall/2004edgefirewall.htm
<http://www.msfirewall.org/isa2004/2004edgefirewall/2004edgefirewall.htm
> 

        HTH,

        Thomas W Shinder
        www.isaserver.org/shinder <http://www.isaserver.org/shinder> 
        ISA 2004 Beta - Get it now!
        http://www.microsoft.com/isaserver/beta/default.asp
<http://www.microsoft.com/isaserver/beta/default.asp> 
        ISA Server and Beyond: http://tinyurl.com/1jq1
        Configuring ISA Server: http://tinyurl.com/1llp
<http://tinyurl.com/1llp> 
        ------------------------------------------------------
        List Archives:
http://www.webelists.com/cgi/lyris.pl?enter=isalist
        ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
        ISA Server FAQ:
http://www.isaserver.org/pages/larticle.asp?type=FAQ
        ------------------------------------------------------
        Other Internet Software Marketing Sites:
        Leading Network Software Directory: http://www.serverfiles.com
        No.1 Exchange Server Resource Site: http://www.msexchange.org
        Windows Security Resource Site: http://www.windowsecurity.com/
        Network Security Library: http://www.secinf.net/
        Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
        ------------------------------------------------------
        You are currently subscribed to this ISAserver.org Discussion
List as: gmulholland@xxxxxxxxxxxxxxx
        To unsubscribe send a blank email to
$subst('Email.Unsub')
------------------------------------------------------
        List Archives:
http://www.webelists.com/cgi/lyris.pl?enter=isalist
        ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
        ISA Server FAQ:
http://www.isaserver.org/pages/larticle.asp?type=FAQ
        ------------------------------------------------------
        Other Internet Software Marketing Sites:
        Leading Network Software Directory: http://www.serverfiles.com
        No.1 Exchange Server Resource Site: http://www.msexchange.org
        Windows Security Resource Site: http://www.windowsecurity.com/
        Network Security Library: http://www.secinf.net/
        Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
        ------------------------------------------------------
        You are currently subscribed to this ISAserver.org Discussion
List as: tshinder@xxxxxxxxxxxxxxxxxx
        To unsubscribe send a blank email to
$subst('Email.Unsub') 

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
gmulholland@xxxxxxxxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
gmulholland@xxxxxxxxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub') 

Other related posts: