Use port 8080?

ISA

    Next

  • 1. HOW TO Count Connection per IP
    Dear all, Anyone now how can I count the concurrent connection opened by an IP address through my ISA 2006 Enterprise? Is is possible via gui, command-line, both? Sincerely I tried with the Session tab, but I have no way to add more fields on the view filter per Client IP Address. Any help would be really appreciated, I am trying to integrate a manual check after a SCOM Alert is generated about max concurrent connection threshold is reached. Regards Matteo

Use port 8080?

Postby melickas » Fri, 24 Jun 2005 22:16:42 GMT

Running SBS2003 Premium with ISA 2000. The Firewall Client is installed
on all workstations. In IE Lan settings, if I set the clients to use
"Proxy server" with port 8080, they can browse the Internet. If I
instead set IE Lan settings to "Automatically Detect Settings", they
can browse Internet also.

What is the proper way to setup the clients and why does it work either
way?

Thanks


Re: Use port 8080?

Postby Phillip Windell » Fri, 24 Jun 2005 23:09:03 GMT

The Automatic settings isn't doing anything and they are simply falling back
to using the Firewall Servie instead of the Web Proxy Service.

There is a lot more to setting up the Autodetect  than checking a box in the
browser.

The Brower's proxy settings are only for the Web Proxy Service.  The Browser
is not "aware" of anything else.  If the Browser has proxy settings then it
sends the web Requests to the Proxy, if it has no proxy settings then it
sends the Web Requests to the TCP/IP Stack.  It is not intelligent and it
does not do anything else other than separate Netbios URL from "dotted"
URLs.  Netbios URLs are not sent to the proxy, but all "dotted" URLs are
sent to the proxy.

The Firewall Client is only for the Firewall Service. It is a Winsock LSP
(Layered Service Provider).  It intercepts anything sent to the TCP/IP stack
and examine it to see if it should be sent to the proxy or left alone.  When
the browser has no proxy settings and sends the requests to the TCP/IP stack
the Firewall Client intercepts it and send it to the proxy. The browser has
no knowledge that this is happening and has no concept that a proxy is being
used even when it is being used.

SecureNAT Clients do not use the browser's proxy settings and do not use the
Firewall Client. they operate soley on the LAN's Layer3 routing scheme
(usually the clients Default Gateway). SecureNAT Clients can not be
authenticated by user accounts.

-- 

Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com









Similar Threads:

1.Accessing a web site using port 8080

I have a router that I need to access remotely and it is configured to listen 
on port 8080. I have added a rule to allow 8080 outbound (and inbound) and 
the ISA server itself can access the remote router (its a LINKSYS) but my PC 
behind the firewall cannot. The monitoring of ISA shows a successful 
"Initiated Connection" but I never get back the prompt from the LinkSys 
asking for the account/password.

Any help would be greatly appreciated.

2.Allowing VoIP traffic on ports 5060 and 8080 through ISA 2006

Dear all,

I am having seriuos problems getting VoIP traffic into and out of my network 
via the ISA server which we just newly installed.

My requirement is for users to have internet access from the ISA Server 
itself, and i have enabled browsing from the Local Host Network, set the 
 browser settings, and  included the sites in the System Policy Allowed 
Sites. And it is working perfectly.

The big problem still remains that my IP phones cannot register to my proxy 
server sited at some remote location outside my LAN.

My network topology is such that the phones i am using for the VoIP service, 
sitting inside my network and behind the ISA server, have to register to some 
remote proxy server outside my network and as soon as it registers i can 
begin using the service. The VoIP service is on the platform of SIP and uses 
udp ports 5060 and 8080.

I have permitted the necessary ports on the ISA server for the service being 
UDP port 5060 and 8080 but still cannot get my VoIP traffic through the 
server.

The main question here is: Just as i did including sites in the systems 
policy Allowed site, is it possible including the IP address of the SIP proxy 
server with some remote IP address like 81.203.23.213, to which my phones 
should register to?

Please i need some help here as regards something i am supposed to do or 
something i am not doing correctly.

Leonard

3.MBSA, RealPlayer Can't Connect, port 8080 Denied Connection

I probably haven't read enough manuals or done sufficient poking around to 
be able to throw up my hands and say 'I can't fix this!' but I'm going to 
anyway.  My boss can't get RealPlayer to conenct across ISA 2K4 and I can't 
get MS Baseline Security Analyzer 2.0 to download its security update info 
from MS.  In both cases, the ISA log shows 'Denied Connection' entries for 
packets from the client, but for destination port 8080 and targeted at the 
internal address of the ISA server.  The log entry is from the proxy and the 
user is anonymous.  The rule that's blocking the packets is the one that 
*would* allow them out *if* the connection was authenticated.

I'm running Firewall Client and IE is set up to use the Web Proxy;  ISA is 
running proxy.  I haven't yet put SP1 in. 


4.Change default port 8080 for web proxy service on ISA 2004

Hi All - The web proxy service of the ISA 2004 uses 8080 as default port.
How do I change this default port to different port, said port 80?  Thanks!

Thomas


5.Websites port 8080

I have a back to back ISA firewall configuration. I recently made a GPO 
change and removed proxy settings from all my client computers. Now when 
clients try to access specific websites that specify port 8080 on the URL 
they are unable to access the website. any thoughts?

-Michael

6. Changing defaul 8080 port

7. Reg. 8080 Port and Internet Connections

8. How can I publish site on different port (https://my:8080)



Return to ISA

 

Who is online

Users browsing this forum: No registered users and 4 guest