Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
Home
Discussion GroupsWindows Server 2003Windows 2000Windows NTSmall Business ServerVirtual ServerExchange ServerIISHost Integration ServerISA ServerSMSWSUSMOMWindows Media ServerSecurityCertification
Related Topics
SQL ServerMS WindowsMS OfficePC HardwareMore Topics ...

Windows Server Forum / Small Business Server / SBS 2000 / May 2008

Tip: Looking for answers? Try searching our database.

Extending the ISA Firewall’s SSL    Tunnel Port Range

Thread view: 
Enable EMail Alerts  Start New Thread
Thread rating: 
Don - 30 Apr 2008 00:51 GMT
I need to access an external SSL website which is on a port other than 443.  
When I try to connect to the site I receive the following message from ISA:

HTTP 502 Proxy Error - The specified Secure Sockets Layer (SSL) port is not
allowed. ISA Server is not configured to allow SSL requests from this port.
Most Web browsers use port 443 for SSL requests. (12204)

I googled the message and located the following article:
http://www.isaserver.org/articles/2004tunnelportrange.html

The problem is thta this article was written for ISA 2004.  Will these
procedures work for ISA 2000, or are there different steps I should follow?

Thank you,
Don
SuperGumby [SBS MVP] - 30 Apr 2008 01:29 GMT
google search term 'isa 2000 ssl port' reveals
http://blogs.conchango.com/markwilson/archive/2005/07/15/1800.aspx

>I need to access an external SSL website which is on a port other than 443.
> When I try to connect to the site I receive the following message from
[quoted text clipped - 15 lines]
> Thank you,
> Don
Merv Porter [SBS-MVP] - 30 Apr 2008 02:09 GMT
There is a counterpart ISATpre.zip for ISA 2000 at:
(may even be the same tool as for ISA 2004)
http://www.isatools.org/tools.asp?Context=ISA2000

Signature

Merv  Porter   [SBS-MVP]
============================

>I need to access an external SSL website which is on a port other than 443.
> When I try to connect to the site I receive the following message from
[quoted text clipped - 15 lines]
> Thank you,
> Don
Steve Foster [SBS MVP] - 01 May 2008 11:14 GMT
>There is a counterpart ISATpre.zip for ISA 2000 at:
>(may even be the same tool as for ISA 2004)
>http://www.isatools.org/tools.asp?Context=ISA2000

No, it won't be the same, as the COM objects used to manipulate the SSL
tunnel port ranges changed between ISA2000 and ISA2004 (ie an ISA2000
script won't work on 2004, and vice versa).

Signature

Steve Foster [SBS MVP]
---------------------------------------
MVPs do not work for Microsoft. Please reply only to the newsgroups.

Merv Porter [SBS-MVP] - 01 May 2008 12:21 GMT
Thanks for the explanation Steve!

Signature

Merv  Porter   [SBS-MVP]
============================

>>There is a counterpart ISATpre.zip for ISA 2000 at:
>>(may even be the same tool as for ISA 2004)
[quoted text clipped - 3 lines]
> tunnel port ranges changed between ISA2000 and ISA2004 (ie an ISA2000
> script won't work on 2004, and vice versa).
 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2009 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.