How to open a port on ISA Server

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

SOLUTION

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

Simon - it is for https therefore it does not need a protocol - https is the protocol. ISA and FTMG only allows https over ports 443 and 563 out of the box.

You need to use the ISA_tpr.js script to add additional https to operate over additional ports. Once done, the existing https definition, regardless of access rule or publishing rule will include the new port number. All it requires is stopping and restarting the ISA or FTMG services after it is added.

Keith

Keith,
I agree with you, but this applies only if wants to perform HTTP(S) publishing. He can workaround this by just allowing access directly to the service on a specific port - Server publishing rule, therefore ISA would not care what kind of traffic it is - handle the traffic at layer 2 rather than layer 7.

You think so?

sorry, my mistake - the correct thing to say would be to handle it layer 4 instead of layer 7.

He could do either thing, it's mwebb's choice, but handling this with HTTPS publishing would be more secure.

But again it depends on the application.

SOLUTION

amjad4

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

ASKER

Thanks everyone, I will try this today, I had most of it completed the way I thought it should be done with a few tweaks (thanks Amjad4). Is there a good way to test if I have completed correctly? I just have to go through and check my work again because the site still isn't working, but I need to make sure it is not the FW so that I can go back to IBM and let them know.

Thanks again!

You can check the session state and monitor what happens with these ports

TMG Console -> logs and reporting - > logging tab

ASKER

I am sorry I don't mean to be a completely ignorant, but unfortunately on the ISA I am. I searched google but couldn't find the correct answer. I am now getting "Failed Connection Attempt" in my log file. I don't think the url is correct it has a space in it, but IBM assures me it is correct.

Thanks again for all your help!

I guess by now you have decided it cannot be done except the way I have advised?

ASKER

To be completely honest I am not sure if it is working or not. I can't get to the web site, I do not know why they would make it so difficult to get to their sites when we are business partners! Of course IBM is IBM they do what they want and we just deal with it..

I am really curious what was the solution? Would you mind sharing?