geekswithblogs.net

The Guide of a MOSSLover

Becky Isserman's Blog


News

About Me:
I am a 26 year old female SharePoint Enthusiast. I work for B&R Business Solutions from my home in Olathe, KS. I have been working with SharePoint since I attended the Portal University in 2005. I hold a BA in Computer Science from the University of Missouri - Kansas City. I love playing Rockband, organizing user group meetings, working with MOSS, attending Code Camps as a speaker, and having bizarre conversations about geek things with cool people. If you have any comments or questions fill out the contact form and I will try my best to help.

Rebecca Isserman's Facebook profile

My Stats

  • Posts - 126
  • Comments - 146
  • Trackbacks - 0

Twitter












Tag Cloud


Recent Comments


Recent Posts


Archives


Post Categories


Blogs on SharePoint


Other Blogs


Resources on Sharepoint


Stuff


<< Kansas City Office Geeks Meeting Recap | Home | How to Upgrade from SQL Express to SQL Enterprise Edition >>

New Firewall Woes



Our networking department is implementing a new firewall/vpn device a Cisco ASA 5520.  They allow access to the main Intranet Portal, but there are some links from one of the groups that go to SharePoint.  The firewall is encrypting the links using SSL and allowing access to the entire SharePoint Portal.  I am trying to figure out how to block access to SharePoint using this VPN Connection.  I am going to look around into some type of redirect option.  It is new and exciting for me, but entirely uncharted waters.  If anyone has dealt with a similar issue please let me know what you did to fix the problem.  I am up for anything no matter how crazy.

posted @ Friday, June 06, 2008 3:03 PM | Filed Under [ MOSS ]

Comments

Gravatar # re: New Firewall Woes
Posted by J on 6/7/2008 2:08 PM
Found this on the net. Still reading it though
Gravatar # re: New Firewall Woes
Posted by J on 6/7/2008 2:42 PM
Hey
I think it is a networking issue with how our firewall on the servers work. The more I read I think it have to do with the firewall. Looking up the changes for bluecode the firewall changes.
They recomend a ISA server with their firewall.

I think Todd might have to change something on the bluecoat. Still looking
Gravatar # re: New Firewall Woes
Posted by MOSSLover on 6/7/2008 5:24 PM
Matt said something about having an appliance in between to check authentication. I'm really thinking we might need to purchase something extra.
Gravatar # re: New Firewall Woes
Posted by J on 6/7/2008 5:50 PM
"The Intelligent Application Gateway (IAG) 2007 with SharePoint Application Optimizer is the only SSL VPN solution specifically designed for SharePoint. IAG 2007 complements the Microsoft Internet Security & Acceleration (ISA) Server 2006 solution for securely publishing SharePoint (and Exchange) by providing additional security elements, integrating third-party applications into the portal and publishing to unmanaged endpoints without requiring a component download. The gateway provides browser-based access, endpoint security including the Attachment Wiper™ session residue shredder, and the ability to host multiple portals on a single gateway. By leveraging these capabilities, customers can expand the availability of SharePoint to a broad range of users and access scenarios, entrenching its value as a collaboration platform."

Did you get this from the PDF I sent you. It lays it out on how networking needs to set it up.

http://www.nappliance.com/support/library/mIAG/IAG_SSL%20VPN%20for%20SharePoint-1.0.pdf

Here is also some software to think about.
http://shop.mensys.nl/ISAServer/ISAServer2004.pdf
http://download.microsoft.com/download/7/a/d/7ad19879-0ca9-4541-890b-8c07887e02ae/ISA2004SE_wp_bettertogether.doc

I hope this helps. I was bored today just surfing.
Gravatar # re: New Firewall Woes
Posted by AlphaAlien on 6/9/2008 2:23 PM
Have you checked alternate access mappings in Central Administration\Operations\Global Configuration.

Sounds like what you're looking for...
Post a comment





 

Please add 7 and 5 and type the answer here: