http://www.freelists.org/list/isalist Archive of posts for isalist at FreeLists http://feedproxy.google.com/~r/freelists-feeds/isalist/~3/7UlyIEMuMpM/TMG-on-Technet,3 http://www.freelists.org/post/isalist/TMG-on-Technet,3 ------------------------------------------------------- It's not a matter of secrecy, but Greg's not wanting to speculate. We're still getting all the languages sent to the presses. As soon as we've met the primary shipping obligations, MSDN will see the bits. In the meantime, use the demo bits available on MS downloads - that's what they're there for, after all... Jim ... <p><a href="http://feedads.g.doubleclick.net/~a/SlYqLCDX0j6PXmyHYcjHeh5A_fU/0/da"><img src="http://feedads.g.doubleclick.net/~a/SlYqLCDX0j6PXmyHYcjHeh5A_fU/0/di" border="0" ismap="true"></img></a><br/> <a href="http://feedads.g.doubleclick.net/~a/SlYqLCDX0j6PXmyHYcjHeh5A_fU/1/da"><img src="http://feedads.g.doubleclick.net/~a/SlYqLCDX0j6PXmyHYcjHeh5A_fU/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/freelists-feeds/isalist/~4/7UlyIEMuMpM" height="1" width="1"/> http://www.freelists.org/post/isalist/TMG-on-Technet,3 http://feedproxy.google.com/~r/freelists-feeds/isalist/~3/RYTVx6iVmU4/TMG-on-Technet,2 http://www.freelists.org/post/isalist/TMG-on-Technet,2 ------------------------------------------------------- O, what's so secret about that? It's released software. Han. ________________________________ From: isalist-bounce@xxxxxxxxxxxxx [isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Greg Mulholland [greg@xxxxxxxxxxxxxx] ... <p><a href="http://feedads.g.doubleclick.net/~a/cZMTgb9KnC0OLyW5efPdsbAXLWo/0/da"><img src="http://feedads.g.doubleclick.net/~a/cZMTgb9KnC0OLyW5efPdsbAXLWo/0/di" border="0" ismap="true"></img></a><br/> <a href="http://feedads.g.doubleclick.net/~a/cZMTgb9KnC0OLyW5efPdsbAXLWo/1/da"><img src="http://feedads.g.doubleclick.net/~a/cZMTgb9KnC0OLyW5efPdsbAXLWo/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/freelists-feeds/isalist/~4/RYTVx6iVmU4" height="1" width="1"/> http://www.freelists.org/post/isalist/TMG-on-Technet,2 http://feedproxy.google.com/~r/freelists-feeds/isalist/~3/EwGTD3wu6Rw/TMG-on-Technet,1 http://www.freelists.org/post/isalist/TMG-on-Technet,1 i would think before Christmas, however i could bet that those in the know, wouldn't be able to divulge that info. Greg ________________________________________ From: isalist-bounce@xxxxxxxxxxxxx [isalist-bounce@xxxxxxxxxxxxx] on behalf of Han Valk [han.valk@xxxxxxxxxxxxxxx] ... <p><a href="http://feedads.g.doubleclick.net/~a/UUUUpiDUdM7oYbUmVbxuyn1qlXQ/0/da"><img src="http://feedads.g.doubleclick.net/~a/UUUUpiDUdM7oYbUmVbxuyn1qlXQ/0/di" border="0" ismap="true"></img></a><br/> <a href="http://feedads.g.doubleclick.net/~a/UUUUpiDUdM7oYbUmVbxuyn1qlXQ/1/da"><img src="http://feedads.g.doubleclick.net/~a/UUUUpiDUdM7oYbUmVbxuyn1qlXQ/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/freelists-feeds/isalist/~4/EwGTD3wu6Rw" height="1" width="1"/> http://www.freelists.org/post/isalist/TMG-on-Technet,1 http://feedproxy.google.com/~r/freelists-feeds/isalist/~3/rJw0H05Ftnc/TMG-on-Technet http://www.freelists.org/post/isalist/TMG-on-Technet ------------------------------------------------------- Hi, Any idea when we can expect TMG downloads for Technet subscriptions? Han. ------------------------------------------------------ ... <p><a href="http://feedads.g.doubleclick.net/~a/smzQKwewqyRrt4GPJgANKVcWFtI/0/da"><img src="http://feedads.g.doubleclick.net/~a/smzQKwewqyRrt4GPJgANKVcWFtI/0/di" border="0" ismap="true"></img></a><br/> <a href="http://feedads.g.doubleclick.net/~a/smzQKwewqyRrt4GPJgANKVcWFtI/1/da"><img src="http://feedads.g.doubleclick.net/~a/smzQKwewqyRrt4GPJgANKVcWFtI/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/freelists-feeds/isalist/~4/rJw0H05Ftnc" height="1" width="1"/> http://www.freelists.org/post/isalist/TMG-on-Technet http://feedproxy.google.com/~r/freelists-feeds/isalist/~3/vqIGOyTDdCY/VPN-Connection,34 http://www.freelists.org/post/isalist/VPN-Connection,34 Cain and Able doesn't do RDP brute forcing... only if you manage to do some MITM attack, which probably won't work anyway over RDP given the auth channel... And it's not shameless self promotion if I've been giving the tool away for years ;) And the good stuff about the tool was actually written by Ryan Russell - I architected it and did all the research and stuff - he's the one that got the MSTSC api calls to work with ROBOCLIENT. So, if anyone gets the true kudos for l337ness, it's Ryan and not me :) ... <p><a href="http://feedads.g.doubleclick.net/~a/hTCkGsyyQbxTXAScFEkNNnAJf3k/0/da"><img src="http://feedads.g.doubleclick.net/~a/hTCkGsyyQbxTXAScFEkNNnAJf3k/0/di" border="0" ismap="true"></img></a><br/> <a href="http://feedads.g.doubleclick.net/~a/hTCkGsyyQbxTXAScFEkNNnAJf3k/1/da"><img src="http://feedads.g.doubleclick.net/~a/hTCkGsyyQbxTXAScFEkNNnAJf3k/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/freelists-feeds/isalist/~4/vqIGOyTDdCY" height="1" width="1"/> http://www.freelists.org/post/isalist/VPN-Connection,34 http://feedproxy.google.com/~r/freelists-feeds/isalist/~3/F0priYUTEG0/VPN-Connection,33 http://www.freelists.org/post/isalist/VPN-Connection,33 Thor = Shameless Self Promotion? Why use brute forcing when firing up Cain Abel is so much easier (providing you can hide it from anti-virus software)? Well, I suppose as more and more RDP sessions become protected by TLS that might be one reason but wouldn't TLS also defeat brute forcing (don't beat up on me - I'm still a neophyte!)? Or is this tool capable of that because the fricken genius who wrote it is a fricken l337 haxxor? I wanna see... please show me? Please? :) ... <p><a href="http://feedads.g.doubleclick.net/~a/k8Jk2qQl5ppQQKdKnIc3QJNCQvw/0/da"><img src="http://feedads.g.doubleclick.net/~a/k8Jk2qQl5ppQQKdKnIc3QJNCQvw/0/di" border="0" ismap="true"></img></a><br/> <a href="http://feedads.g.doubleclick.net/~a/k8Jk2qQl5ppQQKdKnIc3QJNCQvw/1/da"><img src="http://feedads.g.doubleclick.net/~a/k8Jk2qQl5ppQQKdKnIc3QJNCQvw/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/freelists-feeds/isalist/~4/F0priYUTEG0" height="1" width="1"/> http://www.freelists.org/post/isalist/VPN-Connection,33 http://feedproxy.google.com/~r/freelists-feeds/isalist/~3/CiZw7Cp4Xjk/VPN-Connection,32 http://www.freelists.org/post/isalist/VPN-Connection,32 The tool or the author? (sorry, couldn't resist) From: isalist-bounce@xxxxxxxxxxxxx [] On Behalf Of Greg Mulholland Sent: Tuesday, November 24, 2009 3:51 PM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Re: VPN Connection It is indeed a tool! ... <p><a href="http://feedads.g.doubleclick.net/~a/cLi4cldTVR2GioysiebyQjYy-VU/0/da"><img src="http://feedads.g.doubleclick.net/~a/cLi4cldTVR2GioysiebyQjYy-VU/0/di" border="0" ismap="true"></img></a><br/> <a href="http://feedads.g.doubleclick.net/~a/cLi4cldTVR2GioysiebyQjYy-VU/1/da"><img src="http://feedads.g.doubleclick.net/~a/cLi4cldTVR2GioysiebyQjYy-VU/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/freelists-feeds/isalist/~4/CiZw7Cp4Xjk" height="1" width="1"/> http://www.freelists.org/post/isalist/VPN-Connection,32 http://feedproxy.google.com/~r/freelists-feeds/isalist/~3/kkP4hZ7yVsQ/VPN-Connection,31 http://www.freelists.org/post/isalist/VPN-Connection,31 It is indeed a tool! ________________________________ From: isalist-bounce@xxxxxxxxxxxxx [isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Thor (Hammer of God) [thor@xxxxxxxxxxxxxxx] Sent: Tuesday, November 24, 2009 9:01 AM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Re: VPN Connection Brute forcing RDP connections is very difficult. In fact, it would take a freaking genius to write such a tool. I mean, the author would have to be a ... <p><a href="http://feedads.g.doubleclick.net/~a/zIGvVhIsvAr0mk86TxFDKnHYkcM/0/da"><img src="http://feedads.g.doubleclick.net/~a/zIGvVhIsvAr0mk86TxFDKnHYkcM/0/di" border="0" ismap="true"></img></a><br/> <a href="http://feedads.g.doubleclick.net/~a/zIGvVhIsvAr0mk86TxFDKnHYkcM/1/da"><img src="http://feedads.g.doubleclick.net/~a/zIGvVhIsvAr0mk86TxFDKnHYkcM/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/freelists-feeds/isalist/~4/kkP4hZ7yVsQ" height="1" width="1"/> http://www.freelists.org/post/isalist/VPN-Connection,31 http://feedproxy.google.com/~r/freelists-feeds/isalist/~3/MLigqhxsFkA/VPN-Connection,30 http://www.freelists.org/post/isalist/VPN-Connection,30 If deployed with brute-force mitigation, indeed. Require smart card and you're golden. If you use the same creds against TSG as the back end server, then you're really in the same ballpark - but I would have to rewrite TSGrinder to attempt dual logon. AND to use NLA. It would be messy. t From: isalist-bounce@xxxxxxxxxxxxx [] On Behalf Of Jim Harrison Sent: Tuesday, November 24, 2009 11:30 AM ... <p><a href="http://feedads.g.doubleclick.net/~a/mTmTTf5H-JMIesyqOri-ukgnXa8/0/da"><img src="http://feedads.g.doubleclick.net/~a/mTmTTf5H-JMIesyqOri-ukgnXa8/0/di" border="0" ismap="true"></img></a><br/> <a href="http://feedads.g.doubleclick.net/~a/mTmTTf5H-JMIesyqOri-ukgnXa8/1/da"><img src="http://feedads.g.doubleclick.net/~a/mTmTTf5H-JMIesyqOri-ukgnXa8/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/freelists-feeds/isalist/~4/MLigqhxsFkA" height="1" width="1"/> http://www.freelists.org/post/isalist/VPN-Connection,30 http://feedproxy.google.com/~r/freelists-feeds/isalist/~3/9Tl3IBzDFXg/VPN-Connection,29 http://www.freelists.org/post/isalist/VPN-Connection,29 Yeh - that should be a bit harder against TSG, I'd expect... ________________________________ From: isalist-bounce@xxxxxxxxxxxxx [isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Thor (Hammer of God) [thor@xxxxxxxxxxxxxxx] Sent: Tuesday, November 24, 2009 9:01 AM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Re: VPN Connection Brute forcing RDP connections is very difficult. In fact, it would take a ... <p><a href="http://feedads.g.doubleclick.net/~a/ePiiyW8m92vtcTbAwAOPLbQ6B5M/0/da"><img src="http://feedads.g.doubleclick.net/~a/ePiiyW8m92vtcTbAwAOPLbQ6B5M/0/di" border="0" ismap="true"></img></a><br/> <a href="http://feedads.g.doubleclick.net/~a/ePiiyW8m92vtcTbAwAOPLbQ6B5M/1/da"><img src="http://feedads.g.doubleclick.net/~a/ePiiyW8m92vtcTbAwAOPLbQ6B5M/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/freelists-feeds/isalist/~4/9Tl3IBzDFXg" height="1" width="1"/> http://www.freelists.org/post/isalist/VPN-Connection,29 http://feedproxy.google.com/~r/freelists-feeds/isalist/~3/7HiMyEvkpTk/VPN-Connection,28 http://www.freelists.org/post/isalist/VPN-Connection,28 While both statements are true, they also both need to be balanced against the need to touch the ISA remotely. If this is a requirement (because you manage an ISA/TMG in Bermuda, for instance), you need to balance the increased security of the odd port or TSG publishing against the pain of travelling 100's of miles to handle the server directly. It's ain't always so simple... ________________________________ ... <p><a href="http://feedads.g.doubleclick.net/~a/SytZg4HDbIH3hUzUwXq2IMrR3Jw/0/da"><img src="http://feedads.g.doubleclick.net/~a/SytZg4HDbIH3hUzUwXq2IMrR3Jw/0/di" border="0" ismap="true"></img></a><br/> <a href="http://feedads.g.doubleclick.net/~a/SytZg4HDbIH3hUzUwXq2IMrR3Jw/1/da"><img src="http://feedads.g.doubleclick.net/~a/SytZg4HDbIH3hUzUwXq2IMrR3Jw/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/freelists-feeds/isalist/~4/7HiMyEvkpTk" height="1" width="1"/> http://www.freelists.org/post/isalist/VPN-Connection,28 http://feedproxy.google.com/~r/freelists-feeds/isalist/~3/UQHWu2B_2CE/VPN-Connection,27 http://www.freelists.org/post/isalist/VPN-Connection,27 Brute forcing RDP connections is very difficult. In fact, it would take a freaking genius to write such a tool. I mean, the author would have to be a freaking l337 haxxor or something. I only know of one tool in the world that does that ;) t From: isalist-bounce@xxxxxxxxxxxxx [] On Behalf Of Jim Harrison Sent: Tuesday, November 24, 2009 6:25 AM ... <p><a href="http://feedads.g.doubleclick.net/~a/I0VbZldmfJBhVhI56x7Nrw7Twak/0/da"><img src="http://feedads.g.doubleclick.net/~a/I0VbZldmfJBhVhI56x7Nrw7Twak/0/di" border="0" ismap="true"></img></a><br/> <a href="http://feedads.g.doubleclick.net/~a/I0VbZldmfJBhVhI56x7Nrw7Twak/1/da"><img src="http://feedads.g.doubleclick.net/~a/I0VbZldmfJBhVhI56x7Nrw7Twak/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/freelists-feeds/isalist/~4/UQHWu2B_2CE" height="1" width="1"/> http://www.freelists.org/post/isalist/VPN-Connection,27 http://feedproxy.google.com/~r/freelists-feeds/isalist/~3/C3NWntfG6nc/VPN-Connection,26 http://www.freelists.org/post/isalist/VPN-Connection,26 Yep. Easier to just change the listening port on the external interface and RDP to it, and leave your publishing rule internally (to the internal network, not the internal NIC) alone. TSGateway of course if the mondo way of doing this - that way you leave external access to the ISA itself alone, publish 443 to your TSG, and use that to connect to the internal interface of the ISA (and the rest of your network). t ... <p><a href="http://feedads.g.doubleclick.net/~a/c7t2y1_jQmNK9EredByrxVEsawU/0/da"><img src="http://feedads.g.doubleclick.net/~a/c7t2y1_jQmNK9EredByrxVEsawU/0/di" border="0" ismap="true"></img></a><br/> <a href="http://feedads.g.doubleclick.net/~a/c7t2y1_jQmNK9EredByrxVEsawU/1/da"><img src="http://feedads.g.doubleclick.net/~a/c7t2y1_jQmNK9EredByrxVEsawU/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/freelists-feeds/isalist/~4/C3NWntfG6nc" height="1" width="1"/> http://www.freelists.org/post/isalist/VPN-Connection,26 http://feedproxy.google.com/~r/freelists-feeds/isalist/~3/9brm_V4oSao/VPN-Connection,25 http://www.freelists.org/post/isalist/VPN-Connection,25 Oh! I know! I know! ;) t From: isalist-bounce@xxxxxxxxxxxxx [] On Behalf Of Jim Harrison Sent: Monday, November 23, 2009 10:11 PM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Re: VPN Connection ... <p><a href="http://feedads.g.doubleclick.net/~a/di1Bcr1TShXlEKHRhguVij24fsw/0/da"><img src="http://feedads.g.doubleclick.net/~a/di1Bcr1TShXlEKHRhguVij24fsw/0/di" border="0" ismap="true"></img></a><br/> <a href="http://feedads.g.doubleclick.net/~a/di1Bcr1TShXlEKHRhguVij24fsw/1/da"><img src="http://feedads.g.doubleclick.net/~a/di1Bcr1TShXlEKHRhguVij24fsw/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/freelists-feeds/isalist/~4/9brm_V4oSao" height="1" width="1"/> http://www.freelists.org/post/isalist/VPN-Connection,25 http://feedproxy.google.com/~r/freelists-feeds/isalist/~3/iKcgvJQG5Og/VPN-Connection,24 http://www.freelists.org/post/isalist/VPN-Connection,24 The downside to this technique is that if you stop the firewall service, you can't reach the ISA from outside. OTOH, if you add the External network to the system policy Remote manglement rule, you can still reach the ISA remotely even when the firewall service is stopped (as when a plug-in goes poof). Granted, this also opens the ISA to RDP -based attacks from the Internet, but unless you use a custom port in the RDP publishing to the Internernal NIC, you've effectively done the same thing. Jim ... <p><a href="http://feedads.g.doubleclick.net/~a/4RQlu_-0JQ6P9-6NDzXNC7q1V2w/0/da"><img src="http://feedads.g.doubleclick.net/~a/4RQlu_-0JQ6P9-6NDzXNC7q1V2w/0/di" border="0" ismap="true"></img></a><br/> <a href="http://feedads.g.doubleclick.net/~a/4RQlu_-0JQ6P9-6NDzXNC7q1V2w/1/da"><img src="http://feedads.g.doubleclick.net/~a/4RQlu_-0JQ6P9-6NDzXNC7q1V2w/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/freelists-feeds/isalist/~4/iKcgvJQG5Og" height="1" width="1"/> http://www.freelists.org/post/isalist/VPN-Connection,24 http://feedproxy.google.com/~r/freelists-feeds/isalist/~3/f1gv573kR7Q/ISAserverorg-Product-Review-Celestix-HOTPin http://www.freelists.org/post/isalist/ISAserverorg-Product-Review-Celestix-HOTPin ------------------------------------------------------- ISAserver.org - RealTime Article Update Hi ISAlist, Title: Product Review: Celestix HOTPin ... <p><a href="http://feedads.g.doubleclick.net/~a/3A1RciUlDMgL7KdsibdzTvKq4kI/0/da"><img src="http://feedads.g.doubleclick.net/~a/3A1RciUlDMgL7KdsibdzTvKq4kI/0/di" border="0" ismap="true"></img></a><br/> <a href="http://feedads.g.doubleclick.net/~a/3A1RciUlDMgL7KdsibdzTvKq4kI/1/da"><img src="http://feedads.g.doubleclick.net/~a/3A1RciUlDMgL7KdsibdzTvKq4kI/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/freelists-feeds/isalist/~4/f1gv573kR7Q" height="1" width="1"/> http://www.freelists.org/post/isalist/ISAserverorg-Product-Review-Celestix-HOTPin http://feedproxy.google.com/~r/freelists-feeds/isalist/~3/bFKBKgrCWQQ/VPN-Connection,23 http://www.freelists.org/post/isalist/VPN-Connection,23 Erm....correct me if I'm wrong here....but you can publish the rdp listener to the internal interface can you not??? WTH would you publish the external if it's causing issues? S From: isalist-bounce@xxxxxxxxxxxxx [] On Behalf Of Paul T. Laudenslager Sent: Tuesday, November 24, 2009 12:31 AM To: isalist@xxxxxxxxxxxxx ... <p><a href="http://feedads.g.doubleclick.net/~a/QSf3K-9T7pM-Zto426wN9u_K53Y/0/da"><img src="http://feedads.g.doubleclick.net/~a/QSf3K-9T7pM-Zto426wN9u_K53Y/0/di" border="0" ismap="true"></img></a><br/> <a href="http://feedads.g.doubleclick.net/~a/QSf3K-9T7pM-Zto426wN9u_K53Y/1/da"><img src="http://feedads.g.doubleclick.net/~a/QSf3K-9T7pM-Zto426wN9u_K53Y/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/freelists-feeds/isalist/~4/bFKBKgrCWQQ" height="1" width="1"/> http://www.freelists.org/post/isalist/VPN-Connection,23 http://feedproxy.google.com/~r/freelists-feeds/isalist/~3/i2iFrnAFSME/VPN-Connection,22 http://www.freelists.org/post/isalist/VPN-Connection,22 Your determination is correct about the RDP problem. The VPN problem is most likely the same as what Dan has been fighting. They'd probably show up together (sometimes) because: 1. The ISA fix for the DNS source port randomization grabs ports randomly during service startup and the RRAS service apparently takes issue when ISA grabs UDP:1723 (don't ask) 2. The RDP problem is a race condition. If the RDP service binds first, ISA port stealing comes into play. If not, ISA owns that port and RDP can't ... <p><a href="http://feedads.g.doubleclick.net/~a/AMFyLQUBZIP3Ez9WOWPqFGwmlI8/0/da"><img src="http://feedads.g.doubleclick.net/~a/AMFyLQUBZIP3Ez9WOWPqFGwmlI8/0/di" border="0" ismap="true"></img></a><br/> <a href="http://feedads.g.doubleclick.net/~a/AMFyLQUBZIP3Ez9WOWPqFGwmlI8/1/da"><img src="http://feedads.g.doubleclick.net/~a/AMFyLQUBZIP3Ez9WOWPqFGwmlI8/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/freelists-feeds/isalist/~4/i2iFrnAFSME" height="1" width="1"/> http://www.freelists.org/post/isalist/VPN-Connection,22 http://feedproxy.google.com/~r/freelists-feeds/isalist/~3/ht2n4g7Rlws/VPN-Connection,21 http://www.freelists.org/post/isalist/VPN-Connection,21 Hi Jim, You know, you are probably right and I'm off target but this has happened on a few machines to me. It's probably the way I build my ISA servers as I do them all the same. I always have a need to RDP to the IP on the external interface. The majority of the time, I never have a problem connecting. However, on the boxes that I have intermittantly had problems connecting with, I've noticed a few common issues... ... <p><a href="http://feedads.g.doubleclick.net/~a/YRkhe5V0F5MTouotFK5GYdjzJwQ/0/da"><img src="http://feedads.g.doubleclick.net/~a/YRkhe5V0F5MTouotFK5GYdjzJwQ/0/di" border="0" ismap="true"></img></a><br/> <a href="http://feedads.g.doubleclick.net/~a/YRkhe5V0F5MTouotFK5GYdjzJwQ/1/da"><img src="http://feedads.g.doubleclick.net/~a/YRkhe5V0F5MTouotFK5GYdjzJwQ/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/freelists-feeds/isalist/~4/ht2n4g7Rlws" height="1" width="1"/> http://www.freelists.org/post/isalist/VPN-Connection,21 http://feedproxy.google.com/~r/freelists-feeds/isalist/~3/HXAs03u3dZI/VPN-Connection,20 http://www.freelists.org/post/isalist/VPN-Connection,20 er... How did you assemble the two? Yes, there is a problem with having RDP listening on the external interface if you also have a server publishing listener configured to do the same (race condition), but where does this have any relationship to PPTP VPN failures? Jim ________________________________ ... <p><a href="http://feedads.g.doubleclick.net/~a/L1OT4YjZeao69syP0PMlo8kybJs/0/da"><img src="http://feedads.g.doubleclick.net/~a/L1OT4YjZeao69syP0PMlo8kybJs/0/di" border="0" ismap="true"></img></a><br/> <a href="http://feedads.g.doubleclick.net/~a/L1OT4YjZeao69syP0PMlo8kybJs/1/da"><img src="http://feedads.g.doubleclick.net/~a/L1OT4YjZeao69syP0PMlo8kybJs/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/freelists-feeds/isalist/~4/HXAs03u3dZI" height="1" width="1"/> http://www.freelists.org/post/isalist/VPN-Connection,20 http://feedproxy.google.com/~r/freelists-feeds/isalist/~3/U33mv-scY4I/VPN-Connection,19 http://www.freelists.org/post/isalist/VPN-Connection,19 This is the old dreaded multiple NICs selected for Remote Desktop into ISA. When our server would be rebooted (like a power outage), we could not longer connect properly with RD and VPN's stopped working as well. Restarting the firewall/routing services seemed to get everything working but doing a start/shutdown/restart would NOT resolve the issue. I believe, from what I've read, if you tell Terminal Services to only respond on the Internal NIC card, this problem goes away. However, I like connecting to the outside IP (from remote). So each time I have a problem, I have to ... <p><a href="http://feedads.g.doubleclick.net/~a/18f7IGZEGeUkbHzSadq6ufmeps4/0/da"><img src="http://feedads.g.doubleclick.net/~a/18f7IGZEGeUkbHzSadq6ufmeps4/0/di" border="0" ismap="true"></img></a><br/> <a href="http://feedads.g.doubleclick.net/~a/18f7IGZEGeUkbHzSadq6ufmeps4/1/da"><img src="http://feedads.g.doubleclick.net/~a/18f7IGZEGeUkbHzSadq6ufmeps4/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/freelists-feeds/isalist/~4/U33mv-scY4I" height="1" width="1"/> http://www.freelists.org/post/isalist/VPN-Connection,19 http://feedproxy.google.com/~r/freelists-feeds/isalist/~3/UX5kf9j_jak/TMG-Options,1 http://www.freelists.org/post/isalist/TMG-Options,1 TMG URL Filtering and AM are both ECAL-based subscription-license models. ________________________________ From: isalist-bounce@xxxxxxxxxxxxx [isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Ball, Dan [DBall@xxxxxxxxxxx] Sent: Monday, November 23, 2009 11:41 AM To: 'isalist@xxxxxxxxxxxxx' Subject: [isalist] TMG Options ... <p><a href="http://feedads.g.doubleclick.net/~a/yPjL7sgLlG50r0-id443JsHopIY/0/da"><img src="http://feedads.g.doubleclick.net/~a/yPjL7sgLlG50r0-id443JsHopIY/0/di" border="0" ismap="true"></img></a><br/> <a href="http://feedads.g.doubleclick.net/~a/yPjL7sgLlG50r0-id443JsHopIY/1/da"><img src="http://feedads.g.doubleclick.net/~a/yPjL7sgLlG50r0-id443JsHopIY/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/freelists-feeds/isalist/~4/UX5kf9j_jak" height="1" width="1"/> http://www.freelists.org/post/isalist/TMG-Options,1 http://feedproxy.google.com/~r/freelists-feeds/isalist/~3/1KQKN6UxONI/TMG-Options http://www.freelists.org/post/isalist/TMG-Options I notice that with TMG there is a Web Antimalware subscription available. Is there an option for web filtering available also as part of the Forefront Suite? (I've been using Websense for almost three months now and am ready to dump it already!) -------------------------------------------------- Dan Ball Network and Systems Technician Marquette Area Public Schools ... <p><a href="http://feedads.g.doubleclick.net/~a/ftv9TIWzPqw2DFuajnGXz3VcXvc/0/da"><img src="http://feedads.g.doubleclick.net/~a/ftv9TIWzPqw2DFuajnGXz3VcXvc/0/di" border="0" ismap="true"></img></a><br/> <a href="http://feedads.g.doubleclick.net/~a/ftv9TIWzPqw2DFuajnGXz3VcXvc/1/da"><img src="http://feedads.g.doubleclick.net/~a/ftv9TIWzPqw2DFuajnGXz3VcXvc/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/freelists-feeds/isalist/~4/1KQKN6UxONI" height="1" width="1"/> http://www.freelists.org/post/isalist/TMG-Options http://feedproxy.google.com/~r/freelists-feeds/isalist/~3/Sgj_eKs4hkk/TMG-book-availability,17 http://www.freelists.org/post/isalist/TMG-book-availability,17 How about a donation for my class? Could use about 10 of them. A great opportunity to shape young minds. :) thanks, Amy Babinchak Harbor Computer Services | 248-850-8616 | Mobile 248-890-1794 [cid:image003.gif@01CA6C46.DB336710] ... <p><a href="http://feedads.g.doubleclick.net/~a/sNUjLCE09Au_JLc7eV638MnX7fk/0/da"><img src="http://feedads.g.doubleclick.net/~a/sNUjLCE09Au_JLc7eV638MnX7fk/0/di" border="0" ismap="true"></img></a><br/> <a href="http://feedads.g.doubleclick.net/~a/sNUjLCE09Au_JLc7eV638MnX7fk/1/da"><img src="http://feedads.g.doubleclick.net/~a/sNUjLCE09Au_JLc7eV638MnX7fk/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/freelists-feeds/isalist/~4/Sgj_eKs4hkk" height="1" width="1"/> http://www.freelists.org/post/isalist/TMG-book-availability,17 http://feedproxy.google.com/~r/freelists-feeds/isalist/~3/q3BnPJvld6Q/TMG-book-availability,15 http://www.freelists.org/post/isalist/TMG-book-availability,15 You'd be surprised at what you don't know! From: isalist-bounce@xxxxxxxxxxxxx [] On Behalf Of Thor (Hammer of God) Sent: Saturday, 21 November 2009 9:14 AM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Re: TMG book availability I didn't know Greg helped out on the book too! ... <p><a href="http://feedads.g.doubleclick.net/~a/Wvtqc1lfBKsIoglDTbjyvcm6Gh8/0/da"><img src="http://feedads.g.doubleclick.net/~a/Wvtqc1lfBKsIoglDTbjyvcm6Gh8/0/di" border="0" ismap="true"></img></a><br/> <a href="http://feedads.g.doubleclick.net/~a/Wvtqc1lfBKsIoglDTbjyvcm6Gh8/1/da"><img src="http://feedads.g.doubleclick.net/~a/Wvtqc1lfBKsIoglDTbjyvcm6Gh8/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/freelists-feeds/isalist/~4/q3BnPJvld6Q" height="1" width="1"/> http://www.freelists.org/post/isalist/TMG-book-availability,15 http://feedproxy.google.com/~r/freelists-feeds/isalist/~3/z50UYwKpUeU/TMG-book-availability,14 http://www.freelists.org/post/isalist/TMG-book-availability,14 I didn't know Greg helped out on the book too! t From: isalist-bounce@xxxxxxxxxxxxx [] On Behalf Of Thomas W Shinder Sent: Friday, November 20, 2009 2:09 PM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Re: TMG book availability ... <p><a href="http://feedads.g.doubleclick.net/~a/OXUYrBGVWn9i-zdU9R43fN1-tr0/0/da"><img src="http://feedads.g.doubleclick.net/~a/OXUYrBGVWn9i-zdU9R43fN1-tr0/0/di" border="0" ismap="true"></img></a><br/> <a href="http://feedads.g.doubleclick.net/~a/OXUYrBGVWn9i-zdU9R43fN1-tr0/1/da"><img src="http://feedads.g.doubleclick.net/~a/OXUYrBGVWn9i-zdU9R43fN1-tr0/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/freelists-feeds/isalist/~4/z50UYwKpUeU" height="1" width="1"/> http://www.freelists.org/post/isalist/TMG-book-availability,14 http://feedproxy.google.com/~r/freelists-feeds/isalist/~3/rYyMvbsmOt8/TMG-book-availability,12 http://www.freelists.org/post/isalist/TMG-book-availability,12 We're not going rogue, we're going rouge J From: isalist-bounce@xxxxxxxxxxxxx [] On Behalf Of Steven Comeau Sent: Friday, November 20, 2009 4:02 PM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Re: TMG book availability ... <p><a href="http://feedads.g.doubleclick.net/~a/2770axhzv6eztIrSvbjvmQvMBGc/0/da"><img src="http://feedads.g.doubleclick.net/~a/2770axhzv6eztIrSvbjvmQvMBGc/0/di" border="0" ismap="true"></img></a><br/> <a href="http://feedads.g.doubleclick.net/~a/2770axhzv6eztIrSvbjvmQvMBGc/1/da"><img src="http://feedads.g.doubleclick.net/~a/2770axhzv6eztIrSvbjvmQvMBGc/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/freelists-feeds/isalist/~4/rYyMvbsmOt8" height="1" width="1"/> http://www.freelists.org/post/isalist/TMG-book-availability,12 http://feedproxy.google.com/~r/freelists-feeds/isalist/~3/WK8kPY0XRyw/TMG-book-availability,9 http://www.freelists.org/post/isalist/TMG-book-availability,9 Do you think it will get as much pre-release popularity as Going Rogue? Steve Comeau Associate Director of IT Rutgers Athletics 83 Rockafeller Road Piscataway, NJ 08854 732-445-7802 732-445-4623 (fax) www.scarletknights.com ... <p><a href="http://feedads.g.doubleclick.net/~a/ngXtdRXG4HgSlL32M1GgAY4bT30/0/da"><img src="http://feedads.g.doubleclick.net/~a/ngXtdRXG4HgSlL32M1GgAY4bT30/0/di" border="0" ismap="true"></img></a><br/> <a href="http://feedads.g.doubleclick.net/~a/ngXtdRXG4HgSlL32M1GgAY4bT30/1/da"><img src="http://feedads.g.doubleclick.net/~a/ngXtdRXG4HgSlL32M1GgAY4bT30/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/freelists-feeds/isalist/~4/WK8kPY0XRyw" height="1" width="1"/> http://www.freelists.org/post/isalist/TMG-book-availability,9 http://feedproxy.google.com/~r/freelists-feeds/isalist/~3/GyF9iEFR3Ek/TMG-book-availability,8 http://www.freelists.org/post/isalist/TMG-book-availability,8 You're a 404! From: isalist-bounce@xxxxxxxxxxxxx [] On Behalf Of Steve Moffat Sent: Saturday, 21 November 2009 6:34 AM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Re: TMG book availability :) ... <p><a href="http://feedads.g.doubleclick.net/~a/46IFlYr3bwvNebQW54HW28wuaa4/0/da"><img src="http://feedads.g.doubleclick.net/~a/46IFlYr3bwvNebQW54HW28wuaa4/0/di" border="0" ismap="true"></img></a><br/> <a href="http://feedads.g.doubleclick.net/~a/46IFlYr3bwvNebQW54HW28wuaa4/1/da"><img src="http://feedads.g.doubleclick.net/~a/46IFlYr3bwvNebQW54HW28wuaa4/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/freelists-feeds/isalist/~4/GyF9iEFR3Ek" height="1" width="1"/> http://www.freelists.org/post/isalist/TMG-book-availability,8 http://feedproxy.google.com/~r/freelists-feeds/isalist/~3/t70AyVJjvSA/TMG-book-availability,5 http://www.freelists.org/post/isalist/TMG-book-availability,5 :) From: isalist-bounce@xxxxxxxxxxxxx [] On Behalf Of Ball, Dan Sent: Friday, November 20, 2009 3:32 PM To: 'isalist@xxxxxxxxxxxxx' Subject: [isalist] Re: TMG book availability You're just saying that because it has both Jim and Tom's name on the cover! ... <p><a href="http://feedads.g.doubleclick.net/~a/QKggijEMXi1AXqdt-xRiL8d8ZpA/0/da"><img src="http://feedads.g.doubleclick.net/~a/QKggijEMXi1AXqdt-xRiL8d8ZpA/0/di" border="0" ismap="true"></img></a><br/> <a href="http://feedads.g.doubleclick.net/~a/QKggijEMXi1AXqdt-xRiL8d8ZpA/1/da"><img src="http://feedads.g.doubleclick.net/~a/QKggijEMXi1AXqdt-xRiL8d8ZpA/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/freelists-feeds/isalist/~4/t70AyVJjvSA" height="1" width="1"/> http://www.freelists.org/post/isalist/TMG-book-availability,5 http://feedproxy.google.com/~r/freelists-feeds/isalist/~3/85nl_0QQP9E/TMG-book-availability,4 http://www.freelists.org/post/isalist/TMG-book-availability,4 You're just saying that because it has both Jim and Tom's name on the cover! From: isalist-bounce@xxxxxxxxxxxxx [] On Behalf Of Steve Moffat Sent: Friday, November 20, 2009 2:30 PM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Re: TMG book availability 404 - File or directory not found. ... <p><a href="http://feedads.g.doubleclick.net/~a/nCq8Tx5x7zgVK4ypq8UkPb571Iw/0/da"><img src="http://feedads.g.doubleclick.net/~a/nCq8Tx5x7zgVK4ypq8UkPb571Iw/0/di" border="0" ismap="true"></img></a><br/> <a href="http://feedads.g.doubleclick.net/~a/nCq8Tx5x7zgVK4ypq8UkPb571Iw/1/da"><img src="http://feedads.g.doubleclick.net/~a/nCq8Tx5x7zgVK4ypq8UkPb571Iw/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/freelists-feeds/isalist/~4/85nl_0QQP9E" height="1" width="1"/> http://www.freelists.org/post/isalist/TMG-book-availability,4 http://feedproxy.google.com/~r/freelists-feeds/isalist/~3/yEyTU3RRVck/TMG-book-availability,3 http://www.freelists.org/post/isalist/TMG-book-availability,3 Works for me. ________________________________ From: isalist-bounce@xxxxxxxxxxxxx [] On Behalf Of Steve Moffat Sent: Friday, November 20, 2009 2:30 PM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Re: TMG book availability ... <p><a href="http://feedads.g.doubleclick.net/~a/00cjwXgEnaG1pMUkIjyheJSCxio/0/da"><img src="http://feedads.g.doubleclick.net/~a/00cjwXgEnaG1pMUkIjyheJSCxio/0/di" border="0" ismap="true"></img></a><br/> <a href="http://feedads.g.doubleclick.net/~a/00cjwXgEnaG1pMUkIjyheJSCxio/1/da"><img src="http://feedads.g.doubleclick.net/~a/00cjwXgEnaG1pMUkIjyheJSCxio/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/freelists-feeds/isalist/~4/yEyTU3RRVck" height="1" width="1"/> http://www.freelists.org/post/isalist/TMG-book-availability,3 http://feedproxy.google.com/~r/freelists-feeds/isalist/~3/LI5NZfk8XeU/TMG-book-availability,2 http://www.freelists.org/post/isalist/TMG-book-availability,2 404 - File or directory not found. The resource you are looking for might have been removed, had its name changed, or is temporarily unavailable. From: isalist-bounce@xxxxxxxxxxxxx [] On Behalf Of Jim Harrison Sent: Friday, November 20, 2009 3:23 PM To: isalist@xxxxxxxxxxxxx Subject: [isalist] TMG book availability ... <p><a href="http://feedads.g.doubleclick.net/~a/q5vmZSq2ub5_yAkSf49fJAlTFdU/0/da"><img src="http://feedads.g.doubleclick.net/~a/q5vmZSq2ub5_yAkSf49fJAlTFdU/0/di" border="0" ismap="true"></img></a><br/> <a href="http://feedads.g.doubleclick.net/~a/q5vmZSq2ub5_yAkSf49fJAlTFdU/1/da"><img src="http://feedads.g.doubleclick.net/~a/q5vmZSq2ub5_yAkSf49fJAlTFdU/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/freelists-feeds/isalist/~4/LI5NZfk8XeU" height="1" width="1"/> http://www.freelists.org/post/isalist/TMG-book-availability,2 http://feedproxy.google.com/~r/freelists-feeds/isalist/~3/b6Q3Ur-ZtZ4/TMG-book-availability http://www.freelists.org/post/isalist/TMG-book-availability ..go pre-order yours! ... <p><a href="http://feedads.g.doubleclick.net/~a/Y_Rk0CbUPaIzG774VL8WLSusP-M/0/da"><img src="http://feedads.g.doubleclick.net/~a/Y_Rk0CbUPaIzG774VL8WLSusP-M/0/di" border="0" ismap="true"></img></a><br/> <a href="http://feedads.g.doubleclick.net/~a/Y_Rk0CbUPaIzG774VL8WLSusP-M/1/da"><img src="http://feedads.g.doubleclick.net/~a/Y_Rk0CbUPaIzG774VL8WLSusP-M/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/freelists-feeds/isalist/~4/b6Q3Ur-ZtZ4" height="1" width="1"/> http://www.freelists.org/post/isalist/TMG-book-availability http://feedproxy.google.com/~r/freelists-feeds/isalist/~3/IfoYyRgWK-0/Websense-Block-Page,5 http://www.freelists.org/post/isalist/Websense-Block-Page,5 Using ISA 2006 and Websense v7.1, I'm getting intermittent block pages when hitting blocked sites. What is supposed to happen is that when a blocked page is found, the connection is redirected to another server (on intranet) that will display the block message. This works intermittently. What happens usually is that the user gets a 502 page from the ISA server saying it has denied the request. If you refresh the page, it will (usually) redirect properly and show the actual Websense block page explaining why it was blocked. ... <p><a href="http://feedads.g.doubleclick.net/~a/6xqRCaQGD1cXOqyVL3ApmKVAMtc/0/da"><img src="http://feedads.g.doubleclick.net/~a/6xqRCaQGD1cXOqyVL3ApmKVAMtc/0/di" border="0" ismap="true"></img></a><br/> <a href="http://feedads.g.doubleclick.net/~a/6xqRCaQGD1cXOqyVL3ApmKVAMtc/1/da"><img src="http://feedads.g.doubleclick.net/~a/6xqRCaQGD1cXOqyVL3ApmKVAMtc/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/freelists-feeds/isalist/~4/IfoYyRgWK-0" height="1" width="1"/> http://www.freelists.org/post/isalist/Websense-Block-Page,5 http://feedproxy.google.com/~r/freelists-feeds/isalist/~3/azDISPgXEoo/Sharepoint-external-access,6 http://www.freelists.org/post/isalist/Sharepoint-external-access,6 AAM must be configured. No reverse proxy, including ISA and TMG firewalls can fix it. AAMs must be configured. From: isalist-bounce@xxxxxxxxxxxxx [] On Behalf Of Greg Mulholland Sent: Thursday, November 19, 2009 10:14 PM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Re: Sharepoint external access ... <p><a href="http://feedads.g.doubleclick.net/~a/Tjl_jf17GfCfTIe2guUfANbF7i0/0/da"><img src="http://feedads.g.doubleclick.net/~a/Tjl_jf17GfCfTIe2guUfANbF7i0/0/di" border="0" ismap="true"></img></a><br/> <a href="http://feedads.g.doubleclick.net/~a/Tjl_jf17GfCfTIe2guUfANbF7i0/1/da"><img src="http://feedads.g.doubleclick.net/~a/Tjl_jf17GfCfTIe2guUfANbF7i0/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/freelists-feeds/isalist/~4/azDISPgXEoo" height="1" width="1"/> http://www.freelists.org/post/isalist/Sharepoint-external-access,6 http://feedproxy.google.com/~r/freelists-feeds/isalist/~3/mrLYNhSMTOw/Sharepoint-external-access,5 http://www.freelists.org/post/isalist/Sharepoint-external-access,5 Look into 'alternate access mappings' in the central sharepoint config. This will allow the internal url paths to be re-written as the external name paths. If you dont do this any internal or non fqdn links will break if accessing from through the isa box. Or you could look at Link Translation on the ISA, although i have never done it that way. Also make sure you have your permissions are right is one tip i would give, but other than that its pretty straight forward. Greg ... <p><a href="http://feedads.g.doubleclick.net/~a/RXsRq_T_BmGW_fAHNZ98GiFKc8c/0/da"><img src="http://feedads.g.doubleclick.net/~a/RXsRq_T_BmGW_fAHNZ98GiFKc8c/0/di" border="0" ismap="true"></img></a><br/> <a href="http://feedads.g.doubleclick.net/~a/RXsRq_T_BmGW_fAHNZ98GiFKc8c/1/da"><img src="http://feedads.g.doubleclick.net/~a/RXsRq_T_BmGW_fAHNZ98GiFKc8c/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/freelists-feeds/isalist/~4/mrLYNhSMTOw" height="1" width="1"/> http://www.freelists.org/post/isalist/Sharepoint-external-access,5 http://feedproxy.google.com/~r/freelists-feeds/isalist/~3/ef4sczYa7Dc/Sharepoint-external-access,4 http://www.freelists.org/post/isalist/Sharepoint-external-access,4 Hi, Similar situation here, I will set it up and see how it goes and get the relevant people involved. Andrew. From: isalist-bounce@xxxxxxxxxxxxx [] On Behalf Of D PIETRUSZKA USWRN INTERLINK INFRA SHIFT MGR Sent: 18 November 2009 13:06 ... <p><a href="http://feedads.g.doubleclick.net/~a/HiV-aHRm_ZjM0v2aM63ri5iJdMc/0/da"><img src="http://feedads.g.doubleclick.net/~a/HiV-aHRm_ZjM0v2aM63ri5iJdMc/0/di" border="0" ismap="true"></img></a><br/> <a href="http://feedads.g.doubleclick.net/~a/HiV-aHRm_ZjM0v2aM63ri5iJdMc/1/da"><img src="http://feedads.g.doubleclick.net/~a/HiV-aHRm_ZjM0v2aM63ri5iJdMc/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/freelists-feeds/isalist/~4/ef4sczYa7Dc" height="1" width="1"/> http://www.freelists.org/post/isalist/Sharepoint-external-access,4 http://feedproxy.google.com/~r/freelists-feeds/isalist/~3/HTV1DIXwmAo/Sharepoint-external-access,3 http://www.freelists.org/post/isalist/Sharepoint-external-access,3 Well I'm the ISA guy here, no Sharepoint but I recall them telling me they had to create the mapping, if something else was need it I can find it out for you, but sharepoint is not really my area. Regards Diego R. Pietruszka MIS - Shift Manager MSC (USA) - Interlink Transport Technologies Direct Phone: (908)605-4147 ... <p><a href="http://feedads.g.doubleclick.net/~a/_ITMrdVhR68Dr4b1fszyB5ynZSk/0/da"><img src="http://feedads.g.doubleclick.net/~a/_ITMrdVhR68Dr4b1fszyB5ynZSk/0/di" border="0" ismap="true"></img></a><br/> <a href="http://feedads.g.doubleclick.net/~a/_ITMrdVhR68Dr4b1fszyB5ynZSk/1/da"><img src="http://feedads.g.doubleclick.net/~a/_ITMrdVhR68Dr4b1fszyB5ynZSk/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/freelists-feeds/isalist/~4/HTV1DIXwmAo" height="1" width="1"/> http://www.freelists.org/post/isalist/Sharepoint-external-access,3 http://feedproxy.google.com/~r/freelists-feeds/isalist/~3/5t0kIrvbKks/Sharepoint-external-access,2 http://www.freelists.org/post/isalist/Sharepoint-external-access,2 Hi, Thanks for that. Did you need to create a URL mapping on the MOSS 2007 server for the external URL? Our URL would be of the form Thanks. Andrew. ... <p><a href="http://feedads.g.doubleclick.net/~a/AE0EbDarMiBUuMt24LeZIG-JkwA/0/da"><img src="http://feedads.g.doubleclick.net/~a/AE0EbDarMiBUuMt24LeZIG-JkwA/0/di" border="0" ismap="true"></img></a><br/> <a href="http://feedads.g.doubleclick.net/~a/AE0EbDarMiBUuMt24LeZIG-JkwA/1/da"><img src="http://feedads.g.doubleclick.net/~a/AE0EbDarMiBUuMt24LeZIG-JkwA/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/freelists-feeds/isalist/~4/5t0kIrvbKks" height="1" width="1"/> http://www.freelists.org/post/isalist/Sharepoint-external-access,2 http://feedproxy.google.com/~r/freelists-feeds/isalist/~3/VwGLyNvuyQo/Sharepoint-external-access,1 http://www.freelists.org/post/isalist/Sharepoint-external-access,1 Hey Andrew We have sharepoint published on internet with ISA2006 and the publishing was pretty straight forward, simply create a Sharepoint publishing rule and follow the directions on the wizard. You can see my login page here I did a minimum of customization, just to make it look exactly how my owa page looks. Let me know if there is anything you would like to know about the rule or how ... <p><a href="http://feedads.g.doubleclick.net/~a/kE1bCtNFOjRG8smdGfLqAOTyYGE/0/da"><img src="http://feedads.g.doubleclick.net/~a/kE1bCtNFOjRG8smdGfLqAOTyYGE/0/di" border="0" ismap="true"></img></a><br/> <a href="http://feedads.g.doubleclick.net/~a/kE1bCtNFOjRG8smdGfLqAOTyYGE/1/da"><img src="http://feedads.g.doubleclick.net/~a/kE1bCtNFOjRG8smdGfLqAOTyYGE/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/freelists-feeds/isalist/~4/VwGLyNvuyQo" height="1" width="1"/> http://www.freelists.org/post/isalist/Sharepoint-external-access,1 http://feedproxy.google.com/~r/freelists-feeds/isalist/~3/hQwQPPj6HDk/Sharepoint-external-access http://www.freelists.org/post/isalist/Sharepoint-external-access Hi all, Currently we use ISA 2006 to allow forms-based access to OWA and some other Exchange stuff. We are implementing Sharepoint across the company, and one of the things the management team would like to do is enable external access to this site. Has anyone done this before, and is it relatively straightforward in terms of the ISA side of things (i.e., use forms based access)? Is there anything in TMG 2010 that would make this more secure or easier? ... <p><a href="http://feedads.g.doubleclick.net/~a/AhB8FP-CyWK_dfJc6W7Cxgn6sRU/0/da"><img src="http://feedads.g.doubleclick.net/~a/AhB8FP-CyWK_dfJc6W7Cxgn6sRU/0/di" border="0" ismap="true"></img></a><br/> <a href="http://feedads.g.doubleclick.net/~a/AhB8FP-CyWK_dfJc6W7Cxgn6sRU/1/da"><img src="http://feedads.g.doubleclick.net/~a/AhB8FP-CyWK_dfJc6W7Cxgn6sRU/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/freelists-feeds/isalist/~4/hQwQPPj6HDk" height="1" width="1"/> http://www.freelists.org/post/isalist/Sharepoint-external-access http://feedproxy.google.com/~r/freelists-feeds/isalist/~3/SxvqrqVZ8uU/TMG-2010-Ships http://www.freelists.org/post/isalist/TMG-2010-Ships ... <p><a href="http://feedads.g.doubleclick.net/~a/fjg0WK4kTGIqjWwWB3bU22cqGDs/0/da"><img src="http://feedads.g.doubleclick.net/~a/fjg0WK4kTGIqjWwWB3bU22cqGDs/0/di" border="0" ismap="true"></img></a><br/> <a href="http://feedads.g.doubleclick.net/~a/fjg0WK4kTGIqjWwWB3bU22cqGDs/1/da"><img src="http://feedads.g.doubleclick.net/~a/fjg0WK4kTGIqjWwWB3bU22cqGDs/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/freelists-feeds/isalist/~4/SxvqrqVZ8uU" height="1" width="1"/> http://www.freelists.org/post/isalist/TMG-2010-Ships http://feedproxy.google.com/~r/freelists-feeds/isalist/~3/-bGETLaiFPE/ISAserverorg-Microsoft-Forefront-TMG-FTP-and-FTP-Server-publishing http://www.freelists.org/post/isalist/ISAserverorg-Microsoft-Forefront-TMG-FTP-and-FTP-Server-publishing ------------------------------------------------------- ISAserver.org - RealTime Article Update Hi ISAlist, Title: Microsoft Forefront TMG FTP and FTP Server publishing ... <p><a href="http://feedads.g.doubleclick.net/~a/OBLXIzM_r_Aj-wFogCwk72GLGPs/0/da"><img src="http://feedads.g.doubleclick.net/~a/OBLXIzM_r_Aj-wFogCwk72GLGPs/0/di" border="0" ismap="true"></img></a><br/> <a href="http://feedads.g.doubleclick.net/~a/OBLXIzM_r_Aj-wFogCwk72GLGPs/1/da"><img src="http://feedads.g.doubleclick.net/~a/OBLXIzM_r_Aj-wFogCwk72GLGPs/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/freelists-feeds/isalist/~4/-bGETLaiFPE" height="1" width="1"/> http://www.freelists.org/post/isalist/ISAserverorg-Microsoft-Forefront-TMG-FTP-and-FTP-Server-publishing http://feedproxy.google.com/~r/freelists-feeds/isalist/~3/TgSdI8t6HUY/VPN-Connection,18 http://www.freelists.org/post/isalist/VPN-Connection,18 That did the trick... Thanks again! From: isalist-bounce@xxxxxxxxxxxxx [] On Behalf Of Ball, Dan Sent: Monday, November 16, 2009 12:52 PM To: 'isalist@xxxxxxxxxxxxx' Subject: [isalist] Re: VPN Connection Okay, thanks, I'll test that out tonight. ... <p><a href="http://feedads.g.doubleclick.net/~a/Z74WqpRdgl02tZ6TGvsC2c77aig/0/da"><img src="http://feedads.g.doubleclick.net/~a/Z74WqpRdgl02tZ6TGvsC2c77aig/0/di" border="0" ismap="true"></img></a><br/> <a href="http://feedads.g.doubleclick.net/~a/Z74WqpRdgl02tZ6TGvsC2c77aig/1/da"><img src="http://feedads.g.doubleclick.net/~a/Z74WqpRdgl02tZ6TGvsC2c77aig/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/freelists-feeds/isalist/~4/TgSdI8t6HUY" height="1" width="1"/> http://www.freelists.org/post/isalist/VPN-Connection,18 http://feedproxy.google.com/~r/freelists-feeds/isalist/~3/QYWH02ftl8Q/Netmon-filters,2 http://www.freelists.org/post/isalist/Netmon-filters,2 SWEET! Yes, post 'em all. Not only are they useful, it helps us learn about the syntax. Thanks! ... <p><a href="http://feedads.g.doubleclick.net/~a/WS9Nl0Mpa1zNGQPqiQJaSDgfO1I/0/da"><img src="http://feedads.g.doubleclick.net/~a/WS9Nl0Mpa1zNGQPqiQJaSDgfO1I/0/di" border="0" ismap="true"></img></a><br/> <a href="http://feedads.g.doubleclick.net/~a/WS9Nl0Mpa1zNGQPqiQJaSDgfO1I/1/da"><img src="http://feedads.g.doubleclick.net/~a/WS9Nl0Mpa1zNGQPqiQJaSDgfO1I/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/freelists-feeds/isalist/~4/QYWH02ftl8Q" height="1" width="1"/> http://www.freelists.org/post/isalist/Netmon-filters,2 http://feedproxy.google.com/~r/freelists-feeds/isalist/~3/FTtx2ReF8QA/Netmon-filters http://www.freelists.org/post/isalist/Netmon-filters It's been brought to my attention that perhaps some of the goodies in my bag-o-tricks might be useful to other folks. Specifically, my favorite Network Monitor display filters might be interesting to share. I've attached a netmon filter that will isolate the traffic related to WPAD and WSPAD mechanisms. Let me know if this seems useful and I'll assemble a few more. Jim ... <p><a href="http://feedads.g.doubleclick.net/~a/6KlFhcn5-DWw9rqdUSWTtWOOi0c/0/da"><img src="http://feedads.g.doubleclick.net/~a/6KlFhcn5-DWw9rqdUSWTtWOOi0c/0/di" border="0" ismap="true"></img></a><br/> <a href="http://feedads.g.doubleclick.net/~a/6KlFhcn5-DWw9rqdUSWTtWOOi0c/1/da"><img src="http://feedads.g.doubleclick.net/~a/6KlFhcn5-DWw9rqdUSWTtWOOi0c/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/freelists-feeds/isalist/~4/FTtx2ReF8QA" height="1" width="1"/> http://www.freelists.org/post/isalist/Netmon-filters http://feedproxy.google.com/~r/freelists-feeds/isalist/~3/YDF0bJMQaD0/VPN-Connection,17 http://www.freelists.org/post/isalist/VPN-Connection,17 Okay, thanks, I'll test that out tonight. From: isalist-bounce@xxxxxxxxxxxxx [] On Behalf Of Jim Harrison Sent: Monday, November 16, 2009 12:22 PM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Re: VPN Connection Try this at the ISA: ... <p><a href="http://feedads.g.doubleclick.net/~a/Lf04WEaVr_EbkkdIpb7gS9Czhn4/0/da"><img src="http://feedads.g.doubleclick.net/~a/Lf04WEaVr_EbkkdIpb7gS9Czhn4/0/di" border="0" ismap="true"></img></a><br/> <a href="http://feedads.g.doubleclick.net/~a/Lf04WEaVr_EbkkdIpb7gS9Czhn4/1/da"><img src="http://feedads.g.doubleclick.net/~a/Lf04WEaVr_EbkkdIpb7gS9Czhn4/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/freelists-feeds/isalist/~4/YDF0bJMQaD0" height="1" width="1"/> http://www.freelists.org/post/isalist/VPN-Connection,17 http://feedproxy.google.com/~r/freelists-feeds/isalist/~3/IV98j1D58nY/VPN-Connection,16 http://www.freelists.org/post/isalist/VPN-Connection,16 Try this at the ISA: 1. open RegEdit 2. navigate to HKLM\System\CurrentControlSet\Services\Tcpip\Parameters 3. edit the ReservedPorts vaue and add 1723 at the end of the list (DO NOT REPLACE EXISTING ENTRIES) 4. reboot the ISA ________________________________ ... <p><a href="http://feedads.g.doubleclick.net/~a/gXl_OvT9bPPfBvE4O66TCG1LRHc/0/da"><img src="http://feedads.g.doubleclick.net/~a/gXl_OvT9bPPfBvE4O66TCG1LRHc/0/di" border="0" ismap="true"></img></a><br/> <a href="http://feedads.g.doubleclick.net/~a/gXl_OvT9bPPfBvE4O66TCG1LRHc/1/da"><img src="http://feedads.g.doubleclick.net/~a/gXl_OvT9bPPfBvE4O66TCG1LRHc/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/freelists-feeds/isalist/~4/IV98j1D58nY" height="1" width="1"/> http://www.freelists.org/post/isalist/VPN-Connection,16 http://feedproxy.google.com/~r/freelists-feeds/isalist/~3/rHjILfjHk_g/VPN-Connection,15 http://www.freelists.org/post/isalist/VPN-Connection,15 PPTP From: isalist-bounce@xxxxxxxxxxxxx [] On Behalf Of Jim Harrison Sent: Monday, November 16, 2009 11:41 AM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Re: VPN Connection Just for SG; what VPN protocol is in use? ... <p><a href="http://feedads.g.doubleclick.net/~a/3xl2sSZUU4u92QlUvOaDnrcaevk/0/da"><img src="http://feedads.g.doubleclick.net/~a/3xl2sSZUU4u92QlUvOaDnrcaevk/0/di" border="0" ismap="true"></img></a><br/> <a href="http://feedads.g.doubleclick.net/~a/3xl2sSZUU4u92QlUvOaDnrcaevk/1/da"><img src="http://feedads.g.doubleclick.net/~a/3xl2sSZUU4u92QlUvOaDnrcaevk/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/freelists-feeds/isalist/~4/rHjILfjHk_g" height="1" width="1"/> http://www.freelists.org/post/isalist/VPN-Connection,15