SGD through ISA 2006

[ConTheITGuy]

Is any one doing this? We're using a dedicated terminal services server on our curriculum network which is behind an ISA 2006 box. I've set up a publishing rule directing RDP traffic to the remote server, but I'm getting errors when trying to connect. Has anyone else done this? Did you have to do anything fancy? It seemed straightforward enough!

 

Cheers,

 

Andy

[FN-GM]

Do the clients default gateway point to ISA?

What kind of ISA setup is it?

[ConTheITGuy]

No, this is for coming into the school from outside. Via CLEOs webtop. The requests appear to come from somewhere (presumably) in the CLEO network.

[FN-GM]

That willl be the problem then. Your clients default gateway must point to ISA in order for it to work.

 

PS: When i say clients i am talking about the server you are sending to publishing rule to.

Edited March 1, 2010 by FN-GM

[EduTech]

Is any one doing this? We're using a dedicated terminal services server on our curriculum network which is behind an ISA 2006 box. I've set up a publishing rule directing RDP traffic to the remote server, but I'm getting errors when trying to connect. Has anyone else done this? Did you have to do anything fancy? It seemed straightforward enough!

 

Cheers,

 

Andy

 

Hi,

 

It's funny you should ask this kind of question you may also find that it does not appear on google, infact the only search result you may find is one from me on the Sun Forums.

 

anyhow, are you trying to publish the SGD using port 443? by the sounds of it your not so in which case you would need to open up the random port that SGD uses to connect that you may find is not open. (Random Port = 3144) ... on my setup anyway

 

If you would like to do it via 443 which is the preferred way of doing it, then you would need a dedicated IP Address with NO other published services on the same IP (that are using 443 anyway) and then you will need to publish a rule that JUST port forwards 443 rather then publishing it as a site you would then use LDAP Auth on SGD to communicate with your Domain Controllers.

 

- You cannot publish SGD when you have other services on the same IP

- You cannot publish SGD without opening up the Random Port

- Do not publish SGD as a site, create an Access Rule for HTTPS Server from "External" to "SGD Server" and Request appear to come from the orignal client.

 

Hope that helps,

 

James.

[ConTheITGuy]

That willl be the problem then. Your clients default gateway must point to ISA in order for it to work.

 

PS: When i say clients i am talking about the server you are sending to publishing rule to.

 

Doh! That's got it! This is a machine we've not bothered with for a good few months, it still had some old details in there. All sorted now.

 

Cheers,

 

Andy

[FN-GM]

Doh! That's got it! This is a machine we've not bothered with for a good few months, it still had some old details in there. All sorted now.

 

Cheers,

 

Andy

 

No worries i did exactly the same myself.