Announcement

Collapse
No announcement yet.

Isa 2000 & SSL Port

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Isa 2000 & SSL Port

    Hi all,


    We have a website which SSL port is 444 and ISA 2000 only allows 443 as far as I can see but I need to be able to add the 444 port. In 2004 you can use a tool call ISA PRE which is really easy and lets you add the new port easily. I have looked on the web and seen it's possible but Via scripts and that’s where it starts to fall down for me, I am not very hot on vb scripts so need a little help.

    I have found some useful info but the link to the script doesn't work.

    http://consultingblogs.emc.com/markw...7/15/1800.aspx

    http://www.isatools.org/tools.asp?Context=ISA2000

    http://support.microsoft.com/default...b;en-us;283284 - this looks what I need but I am unsure how to put the code into a script and make it run?


    I know some people will ask why are we still using ISA 2000 etc but we are and it works fine for what we need at the moment (well apart from this issue) I just haven't got the time to upgrade all our servers at the moment.

    Can anyone help?

    Cheers,
    Si
    Last edited by Si_Pe; 17th February 2011, 18:55.
    Kind Regards,
    Simon

  • #2
    Re: Isa 2000 & SSL Port

    From isaserver.org:-
    http://forums.isaserver.org/m_502460...m.htm#50246000
    Seems you can just do it via a publishing rule, and if anyone knows it's Tom Shinder.

    And I will say you should upgrade your firewall. ISA 2000 is now 3 versions out of date and well past EOL with Microsoft. Not what I would recommend for an edge device.
    BSc, MCSA: Server 2008, MCSE, MCSA: Messaging, MCTS
    sigpic
    Cruachan's Blog

    Comment


    • #3
      Re: Isa 2000 & SSL Port

      Originally posted by cruachan View Post
      From isaserver.org:-
      http://forums.isaserver.org/m_502460...m.htm#50246000
      Seems you can just do it via a publishing rule, and if anyone knows it's Tom Shinder.

      And I will say you should upgrade your firewall. ISA 2000 is now 3 versions out of date and well past EOL with Microsoft. Not what I would recommend for an edge device.
      Hi,

      Thanks for your repy!

      Any idea how to set this up? I can't seem to see get it to work. Its on my list to upgrade to 2006 in the coming months but need to give users access to the site as soon as possible.

      Thanks again,
      Si
      Kind Regards,
      Simon

      Comment


      • #4
        Re: Isa 2000 & SSL Port

        Hi,

        I have tried the below link but can't get the external thing to work. Should the link work for HTTPS as well as FTP?

        http://www.isaserver.org/tutorials/I...dard_port.html

        Cheers,
        Si
        Kind Regards,
        Simon

        Comment


        • #5
          Re: Isa 2000 & SSL Port

          Fraid not, I know very little about ISA 2000. If it was 2004/6 or TMG I could help more. Dumber may be able to help though.
          BSc, MCSA: Server 2008, MCSE, MCSA: Messaging, MCTS
          sigpic
          Cruachan's Blog

          Comment


          • #6
            Re: Isa 2000 & SSL Port

            Originally posted by cruachan View Post
            Fraid not, I know very little about ISA 2000. If it was 2004/6 or TMG I could help more. Dumber may be able to help though.

            Thanks for your help!
            Kind Regards,
            Simon

            Comment


            • #7
              Help with script

              Hello all,

              I am trying to get a script to work to add a new SSL port into ISA 2000 but I cannot get it to work at all. Now I haven't got the best knowledge when it comes to this sort of thing so wondered if someone could help me out?

              I have another post in the General network section but I hope I don't get abused for posting again but I know know what I need to do but can't get the script to work.

              Can someone help?

              The script I need to make is below.

              Code:
              set isa=CreateObject("FPC.Root")
              set tprange=isa.GetContainingArray.ArrayPolicy.WebProxy.TunnelPortRanges
              set tmp=tprange.AddRange("SSL 444", 444, 444)
              tprange.Save
              The ports I want to add are 444

              The above was taken from here - http://support.microsoft.com/default...b;en-us;283284

              Thanks!
              Last edited by Rems; 21st February 2011, 22:11.
              Kind Regards,
              Simon

              Comment


              • #8
                Re: Help with script

                Threads merged.

                Since that's vBScript, copy that stuff, put into a text file, then rename the *.txt file to *.vbs file. Either double click it or run in a command window (the latter's better in case an error pops up).
                ** Remember to give credit where credit is due and leave reputation points where appropriate **

                Comment


                • #9
                  Re: Help with script

                  Originally posted by Wired View Post
                  Threads merged.

                  Since that's vBScript, copy that stuff, put into a text file, then rename the *.txt file to *.vbs file. Either double click it or run in a command window (the latter's better in case an error pops up).
                  Thanks for your help, I will post my results!

                  Thanks for merging the thread too!
                  Kind Regards,
                  Simon

                  Comment


                  • #10
                    Re: Isa 2000 & SSL Port

                    Hi,

                    I have tried to run the script and have got the below error, could anyone help?



                    Thanks,
                    Simon
                    Kind Regards,
                    Simon

                    Comment


                    • #11
                      Re: Isa 2000 & SSL Port

                      try:
                      Code:
                      newRangeName = "SSL 444"
                      newTunnelPort = CDbl(444)
                      
                      set isa=CreateObject("FPC.Root")
                      
                      Set isaArray = isa.GetContainingArray()
                      Set tpRange = isaArray.ArrayPolicy.WebProxy.TunnelPortRanges
                      
                      set tmp = tprange.AddRange(newRangeName,newTunnelPort,newTunnelPort)
                      
                      tprange.Save

                      This posting is provided "AS IS" with no warranties, and confers no rights.

                      __________________

                      ** Remember to give credit where credit's due **
                      and leave Reputation Points for meaningful posts

                      Comment


                      • #12
                        Re: Isa 2000 & SSL Port

                        I have fixed it, whoop Whoop!

                        The script needed set in front of the tprange, not sure how I managed it as copied it from the MS document.

                        set isa=CreateObject("FPC.Root")
                        set tprange=isa.Arrays.GetContainingArray.ArrayPolicy. WebProxy.TunnelPortRanges
                        set tmp=tprange.AddRange("SSL 444", 444, 444)
                        tprange.Save

                        It works a treat after restarting the ISA services.

                        Thanks for your help!
                        Kind Regards,
                        Simon

                        Comment


                        • #13
                          Re: Isa 2000 & SSL Port

                          Originally posted by Rems View Post
                          try:
                          Code:
                          newRangeName = "SSL 444"
                          newTunnelPort = CDbl(444)
                          
                          set isa=CreateObject("FPC.Root")
                          
                          Set isaArray = isa.GetContainingArray()
                          Set tpRange = isaArray.ArrayPolicy.WebProxy.TunnelPortRanges
                          
                          set tmp = tprange.AddRange(newRangeName,newTunnelPort,newTunnelPort)
                          
                          tprange.Save
                          Thanks,

                          I had noticed I was missing a "set"

                          Thanks for reply!
                          Kind Regards,
                          Simon

                          Comment


                          • #14
                            Re: Isa 2000 & SSL Port

                            Glad it worked, but when you are going to migrate, move to TMG straight away.

                            Edit: moved to General Security, since it belongs to a security product... well, "security"
                            Last edited by Dumber; 22nd February 2011, 17:39.
                            Marcel
                            Technical Consultant
                            Netherlands
                            http://www.phetios.com
                            http://blog.nessus.nl

                            MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
                            "No matter how secure, there is always the human factor."

                            "Enjoy life today, tomorrow may never come."
                            "If you're going through hell, keep going. ~Winston Churchill"

                            Comment


                            • #15
                              Re: Isa 2000 & SSL Port

                              Originally posted by Dumber View Post
                              Glad it worked, but when you are going to migrate, move to TMG straight away.

                              Edit: moved to General Security, since it belongs to a security product... well, "security"
                              Will do!

                              Thanks again!
                              Kind Regards,
                              Simon

                              Comment

                              Working...
                              X