not really, im still trying to get my head around letting a certain isp computer have access to the firewall on a "non defined" inbound port. Greg Mulholland http://www.isaserver.org <http://www.isaserver.org/> http://isatools.org <http://isatools.org/> http://groups.google.com <http://groups.google.com/> ________________________________ From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx] Sent: Tuesday, February 17, 2004 10:40 AM To: [ISAserver.org Discussion List] Subject: [isalist] RE: Using ISA Server 2004 Network Templates to Automatically Create Access Policy: The Edge Firewall Template http://www.ISAserver.org Hi Greg, You can't add anything to the system policy, but you can remove stuff. Actually, I guess you can add stuff, in that when you perform certain actions, like enabling the VPN clients network, the disabled VPN system policy rule becomes enabled. Do you want to place some rules that have a higher priority than the system policy rules? Thanks! Tom ________________________________ From: Greg Mulholland [mailto:gmulholland@xxxxxxxxxxxxxxx] Sent: Monday, February 16, 2004 4:57 PM To: [ISAserver.org Discussion List] Subject: [isalist] RE: Using ISA Server 2004 Network Templates to Automatically Create Access Policy: The Edge Firewall Template http://www.ISAserver.org Yeah but you cant actually add anything to the system policy can you? Greg Mulholland http://www.isaserver.org <http://www.isaserver.org/> http://isatools.org <http://isatools.org/> http://groups.google.com <http://groups.google.com/> ________________________________ From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx] Sent: Tuesday, February 17, 2004 9:48 AM To: [ISAserver.org Discussion List] Subject: [isalist] RE: Using ISA Server 2004 Network Templates to Automatically Create Access Policy: The Edge Firewall Template http://www.ISAserver.org Hi Greg, The default setup has no policies, just the default rule that blocks all access through any of the firewall interfaces. If you use a Network Template, you're offered the opportunity to configure the "Network" object(s), and then pick a Firewall Policy that will create a list of Access Rules, based on the Firewall Policy you select. Maybe you're thinking about the Firewall System Policy, which is set by default and hidden from the interface unless you want explicitly view that policy. You can change the behavior of some of the system policy rules with this version, by right clicking the Firewall Policies node and clicking the Edit System Policy option. HTH, Tom Thomas W Shinder www.isaserver.org/shinder <http://www.isaserver.org/shinder> ISA 2004 Beta - Get it now! http://www.microsoft.com/isaserver/beta/default.asp <http://www.microsoft.com/isaserver/beta/default.asp> ISA Server and Beyond: http://tinyurl.com/1jq1 Configuring ISA Server: http://tinyurl.com/1llp <http://tinyurl.com/1llp> -----Original Message----- From: Greg Mulholland [mailto:gmulholland@xxxxxxxxxxxxxxx] Sent: Monday, February 16, 2004 3:43 PM To: [ISAserver.org Discussion List] Subject: [isalist] RE: Using ISA Server 2004 Network Templates to Automatically Create Access Policy: The Edge Firewall Template http://www.ISAserver.org Tom i've got a question for you. With regards to ISA 2004. Am i right in saying if you use the default setup you cannot change or edit the contents of the predefined policy, but if you create it from one of the templates then you must create it. Maybe im confusing the issue. What i am really talking about is the predefined rules setup to block stuff to the ISA, can they be edited or added too at all. Greg Mulholland http://www.isaserver.org <http://www.isaserver.org/> http://isatools.org <http://isatools.org/> http://groups.google.com <http://groups.google.com/> ________________________________ From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx] Sent: Tuesday, February 17, 2004 12:16 AM To: [ISAserver.org Discussion List] Subject: [isalist] Using ISA Server 2004 Network Templates to Automatically Create Access Policy: The Edge Firewall Template http://www.ISAserver.org Using ISA Server 2004 Network Templates to Automatically Create Access Policy: The Edge Firewall Template: http://www.msfirewall.org/isa2004/2004edgefirewall/2004edgefirewall.htm <http://www.msfirewall.org/isa2004/2004edgefirewall/2004edgefirewall.htm > HTH, Thomas W Shinder www.isaserver.org/shinder <http://www.isaserver.org/shinder> ISA 2004 Beta - Get it now! http://www.microsoft.com/isaserver/beta/default.asp <http://www.microsoft.com/isaserver/beta/default.asp> ISA Server and Beyond: http://tinyurl.com/1jq1 Configuring ISA Server: http://tinyurl.com/1llp <http://tinyurl.com/1llp> ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: gmulholland@xxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: gmulholland@xxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: gmulholland@xxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')