Use port 8080?
by melickas » Fri, 24 Jun 2005 22:16:42 GMT
Running SBS2003 Premium with ISA 2000. The Firewall Client is installed
on all workstations. In IE Lan settings, if I set the clients to use
"Proxy server" with port 8080, they can browse the Internet. If I
instead set IE Lan settings to "Automatically Detect Settings", they
can browse Internet also.
What is the proper way to setup the clients and why does it work either
way?
Thanks
Re: Use port 8080?
by Phillip Windell » Fri, 24 Jun 2005 23:09:03 GMT
The Automatic settings isn't doing anything and they are simply falling back
to using the Firewall Servie instead of the Web Proxy Service.
There is a lot more to setting up the Autodetect than checking a box in the
browser.
The Brower's proxy settings are only for the Web Proxy Service. The Browser
is not "aware" of anything else. If the Browser has proxy settings then it
sends the web Requests to the Proxy, if it has no proxy settings then it
sends the Web Requests to the TCP/IP Stack. It is not intelligent and it
does not do anything else other than separate Netbios URL from "dotted"
URLs. Netbios URLs are not sent to the proxy, but all "dotted" URLs are
sent to the proxy.
The Firewall Client is only for the Firewall Service. It is a Winsock LSP
(Layered Service Provider). It intercepts anything sent to the TCP/IP stack
and examine it to see if it should be sent to the proxy or left alone. When
the browser has no proxy settings and sends the requests to the TCP/IP stack
the Firewall Client intercepts it and send it to the proxy. The browser has
no knowledge that this is happening and has no concept that a proxy is being
used even when it is being used.
SecureNAT Clients do not use the browser's proxy settings and do not use the
Firewall Client. they operate soley on the LAN's Layer3 routing scheme
(usually the clients Default Gateway). SecureNAT Clients can not be
authenticated by user accounts.
--
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com
Similar Threads:
1.Accessing a web site using port 8080
I have a router that I need to access remotely and it is configured to listen
on port 8080. I have added a rule to allow 8080 outbound (and inbound) and
the ISA server itself can access the remote router (its a LINKSYS) but my PC
behind the firewall cannot. The monitoring of ISA shows a successful
"Initiated Connection" but I never get back the prompt from the LinkSys
asking for the account/password.
Any help would be greatly appreciated.
2.Allowing VoIP traffic on ports 5060 and 8080 through ISA 2006
Dear all,
I am having seriuos problems getting VoIP traffic into and out of my network
via the ISA server which we just newly installed.
My requirement is for users to have internet access from the ISA Server
itself, and i have enabled browsing from the Local Host Network, set the
browser settings, and included the sites in the System Policy Allowed
Sites. And it is working perfectly.
The big problem still remains that my IP phones cannot register to my proxy
server sited at some remote location outside my LAN.
My network topology is such that the phones i am using for the VoIP service,
sitting inside my network and behind the ISA server, have to register to some
remote proxy server outside my network and as soon as it registers i can
begin using the service. The VoIP service is on the platform of SIP and uses
udp ports 5060 and 8080.
I have permitted the necessary ports on the ISA server for the service being
UDP port 5060 and 8080 but still cannot get my VoIP traffic through the
server.
The main question here is: Just as i did including sites in the systems
policy Allowed site, is it possible including the IP address of the SIP proxy
server with some remote IP address like 81.203.23.213, to which my phones
should register to?
Please i need some help here as regards something i am supposed to do or
something i am not doing correctly.
Leonard
3.MBSA, RealPlayer Can't Connect, port 8080 Denied Connection
I probably haven't read enough manuals or done sufficient poking around to
be able to throw up my hands and say 'I can't fix this!' but I'm going to
anyway. My boss can't get RealPlayer to conenct across ISA 2K4 and I can't
get MS Baseline Security Analyzer 2.0 to download its security update info
from MS. In both cases, the ISA log shows 'Denied Connection' entries for
packets from the client, but for destination port 8080 and targeted at the
internal address of the ISA server. The log entry is from the proxy and the
user is anonymous. The rule that's blocking the packets is the one that
*would* allow them out *if* the connection was authenticated.
I'm running Firewall Client and IE is set up to use the Web Proxy; ISA is
running proxy. I haven't yet put SP1 in.
4.Change default port 8080 for web proxy service on ISA 2004
Hi All - The web proxy service of the ISA 2004 uses 8080 as default port.
How do I change this default port to different port, said port 80? Thanks!
Thomas
5.Websites port 8080
I have a back to back ISA firewall configuration. I recently made a GPO
change and removed proxy settings from all my client computers. Now when
clients try to access specific websites that specify port 8080 on the URL
they are unable to access the website. any thoughts?
-Michael
6. Changing defaul 8080 port
7. Reg. 8080 Port and Internet Connections
8. How can I publish site on different port (https://my:8080)