Firewalls
Re: Help to remove blocking of MS outlook through ISA 2004 Jun 23 2008 09:20PM
Faris Mlaeb (farisnt yahoo com) (2 replies)
Re: Help to remove blocking of MS outlook through ISA 2004 Jun 27 2008 01:48PM
Qaisar Naseem (qaisarn gmail com) (1 replies)
RE: Help to remove blocking of MS outlook through ISA 2004 Jun 27 2008 02:57PM
Thor \(Hammer of God\) (thor hammerofgod com) (1 replies)
RE: Help to remove blocking of MS outlook through ISA 2004 Jun 30 2008 11:55PM
Faris Mlaeb (farisnt yahoo com)
RE: Help to remove blocking of MS outlook through ISA 2004 Jun 25 2008 06:49PM
Thor \(Hammer of God\) (thor hammerofgod com) (1 replies)
A couple of things:

One, you don't know that he is running a firewall client. Secondly it
is never recommended to just enable full access to an overall
application when you can more finely restrict access based on protocol.
The client may simply be using POP3 -- it would be silly to just "allow
Outlook" as an application to all of your firewall clients when you can
just allow POP3 (or whatever it is) to only the clients that need it.

t

From: listbounce (at) securityfocus (dot) com [email concealed] [mailto:listbounce (at) securityfocus (dot) com [email concealed]]
On Behalf Of Faris Mlaeb
Sent: Monday, June 23, 2008 2:20 PM
To: Thor (Hammer of God); Qaisar Naseem; firewalls (at) securityfocus (dot) com [email concealed]
Subject: Re: Help to remove blocking of MS outlook through ISA 2004

HI

This is normal for ISA and you can fix this by going to:

Open the ISA Server Console and expand the Configuration, and select
General, and then Click on "Define Firewall Client Settings", You will
have a new Window for the "Firewall Client Settings"
Click on the Application Tab and from the list select Outlook
You will notice that its like this:
Outlook Disable 1
change the value to be
Outlook Disable 0

and on the Firewall client on the user PC make sure that you click on
Detect Now Or simply restart your Computer

This work for me perfect

Have a nice time

Note that if the value is not present .. then simply create it

Faris Mlaeb

Technical Manager

Network Administrator

----- Original Message ----
From: Thor (Hammer of God) <thor (at) hammerofgod (dot) com [email concealed]>
To: Qaisar Naseem <qaisarn (at) gmail (dot) com [email concealed]>; firewalls (at) securityfocus (dot) com [email concealed]
Sent: Monday, June 23, 2008 5:33:33 PM
Subject: RE: Help to remove blocking of MS outlook through ISA 2004

What protocols are you using to connect to the server? I'm assuming you
are talking about an internal Outlook client connecting to an external
server. What kind of ISA client is the host? Are you using SNAT or
FWC? A little infoz, please.

t

-----------

Check out Tim Mullen's "Microsoft Ninjitsu" training at Blackhat Vegas
2008.
There are also some other great NGS classes lead by world-class
researchers and trainers available.

http://www.blackhat.com/html/bh-usa-08/train-bh-usa-08-tm-ms-bbe.html

From: listbounce (at) securityfocus (dot) com [email concealed] [mailto:listbounce (at) securityfocus (dot) com [email concealed]]
On Behalf Of Qaisar Naseem
Sent: Friday, June 20, 2008 9:02 AM
To: firewalls (at) securityfocus (dot) com [email concealed]
Subject: Help to remove blocking of MS outlook through ISA 2004

Hi,

I am using Windows server 2003 network with ISA 2004 as proxy. I am
having problem in passing MS outlook requests. Even I created a firewall
rule to allow all outbound traffic to external, but unable to solve the
problem. Outlook configuration is quite OK as when I by pass proxy, it
works fine.

--
Qaisar Naseem
Network Admin
Express News TV
+923457263848

<html>

<head>
<META http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 12 (filtered medium)">
<style>
<!--

@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}

p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
span.emailstyle17
{mso-style-name:emailstyle17;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle20
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.Section1
{page:Section1;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>

<body link=blue vlink=purple>

<div class=Section1>

<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>A couple of things:</span></p>

<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>One, you don't know that he is running a firewall client.  Secondly
it is never recommended to just enable full access to an overall application
when you can more finely restrict access based on protocol.   The client may
simply be using POP3 -- it would be silly to just "allow Outlook" as
an application to all of your firewall clients when you can just allow POP3 (or
whatever it is) to only the clients that need it.  </span></p>

<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'> </span></p>

<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>t</span></p>

<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'> </span></p>

<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'> </span></p>

<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'> </span></p>

<div style='border:none;border-left:solid blue 1.5pt;padding:0in 0in 0in 4.0pt'>

<div>

<div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'>

<p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span><
/b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>
listbounce (at) securityfocus (dot) com [email concealed] [mailto:listbounce (at) securityfocus (dot) com [email concealed]] <b>On Behalf
Of </b>Faris Mlaeb<br>
<b>Sent:</b> Monday, June 23, 2008 2:20 PM<br>
<b>To:</b> Thor (Hammer of God); Qaisar Naseem; firewalls (at) securityfocus (dot) com [email concealed]<br>
<b>Subject:</b> Re: Help to remove blocking of MS outlook through ISA 2004</span></p>

</div>

</div>

<p class=MsoNormal> </p>

<div>

<p>HI</p>

<p>This is normal for ISA and you can fix this by going to:</p>

<p> </p>

<p>Open the ISA Server Console and expand the Configuration, and select
General, and then Click on "Define Firewall Client Settings", You
will have a new Window for the "Firewall Client Settings"<br>
Click on the Application Tab and from the list select Outlook<br>
You will notice that its like this:<br>
Outlook  Disable  1<br>
change the value to be <br>
Outlook  Disable  0</p>

<p>and on the Firewall client on the user PC  make sure that you click on
Detect Now Or simply restart your Computer</p>

<p>This work for me perfect</p>

<p>Have a nice time</p>

<p> </p>

<p> </p>

<p>Note that if the value is not present .. then  simply create it</p>

<p> </p>

<div>

<p class=MsoNormal><br>
 </p>

</div>

<p class=MsoNormal align=center style='text-align:center'><b><span style='font-family:"Calibri","sans-serif";color:#0000BF'>Faris Mlaeb</span></b></p>

<p class=MsoNormal align=center style='text-align:center'><strong><span style='font-family:"Calibri","sans-serif";color:#0000BF'>Technical Manager</span></strong></p>

<p class=MsoNormal align=center style='text-align:center'><strong><span style='font-family:"Calibri","sans-serif";color:#0000BF'>Network Administrator</span></strong></p>

<div>

<p class=MsoNormal style='margin-bottom:12.0pt'> </p>

<div>

<p class=MsoNormal style='margin-bottom:12.0pt'>----- Original Message ----<br>
From: Thor (Hammer of God) <thor (at) hammerofgod (dot) com [email concealed]><br>
To: Qaisar Naseem <qaisarn (at) gmail (dot) com [email concealed]>; firewalls (at) securityfocus (dot) com [email concealed]<br>
Sent: Monday, June 23, 2008 5:33:33 PM<br>
Subject: RE: Help to remove blocking of MS outlook through ISA 2004</p>

<div>

<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>What protocols are you using to connect to the server?  I'm
assuming you are talking about an internal Outlook client connecting to an
external server.  What kind of ISA client is the host?  Are you using
SNAT or FWC?   A little infoz, please.</span></p>

<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'> </span></p>

<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>t</span></p>

<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'> </span></p>

<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'> </span></p>

<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>-----------</span></p>

<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Check out Tim Mullen's "Microsoft Ninjitsu" training
at Blackhat Vegas 2008. <br>
There are also some other great NGS classes lead by world-class researchers and
trainers available.</span></p>

<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><a href="http://www.blackhat.com/html/bh-usa-08/train-bh-usa-08-tm-ms-bbe.h
tml">http://www.blackhat.com/html/bh-usa-08/train-bh-usa-08-tm-ms-bbe.ht
ml</a></span></p>

<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'> </span></p>

<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'> </span></p>

<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'> </span></p>

<div style='border:none;border-left:solid blue 1.5pt;padding:0in 0in 0in 4.0pt'>

<div>

<div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'>

<p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span><
/b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>
listbounce (at) securityfocus (dot) com [email concealed] [mailto:listbounce (at) securityfocus (dot) com [email concealed]] <b>On Behalf
Of </b>Qaisar Naseem<br>
<b>Sent:</b> Friday, June 20, 2008 9:02 AM<br>
<b>To:</b> firewalls (at) securityfocus (dot) com [email concealed]<br>
<b>Subject:</b> Help to remove blocking of MS outlook through ISA 2004</span></p>

</div>

</div>

<p class=MsoNormal> </p>

<div>

<p class=MsoNormal>Hi,</p>

</div>

<div>

<p class=MsoNormal> </p>

</div>

<div>

<p class=MsoNormal>I am using Windows server 2003 network with ISA 2004 as
proxy. I am having problem in passing MS outlook requests. Even I created a
firewall rule to allow all outbound traffic to external, but unable to solve
the problem. Outlook configuration is quite OK as when I by pass proxy, it
works fine.<br>
<br>
-- <br>
Qaisar Naseem<br>
Network Admin<br>
Express News TV<br>
+923457263848 </p>

</div>

</div>

</div>

</div>

</div>

</div>

<p class=MsoNormal> </p>

</div>

</div>

</body>

</html>

[ reply ]
RE: Help to remove blocking of MS outlook through ISA 2004 Jun 26 2008 04:25PM
Faris Mlaeb (farisnt yahoo com) (1 replies)
RE: Help to remove blocking of MS outlook through ISA 2004 Jun 27 2008 04:45AM
Thor \(Hammer of God\) (thor hammerofgod com)


 

Privacy Statement
Copyright 2010, SecurityFocus