Search and Save Visit Half Price Computer Books
				W

Search Fusion13.com Computing Find what you were looking for? Drop us a note.

If the ISA machine is a separate machine from the Email Server.

Create a Server Publishing Rule using the "Secure Mail Server..." wizard.

1. Expand: Internet Security and Acceleration Server > Servers and Arrays > <servername> > Publishing
   
   
   
   
2. Right Click "Server Publishing Rules". Click Secure Mail Server. Click Next.
3. Check the boxes next to the services that you would like to allow. A basic setup would simply have the Incoming and Outgoing SMTP with Default Authentication boxes checked. Click Next. (Fig. 1)
4. To enter the external IP address of the ISA Server, click "Browse". Select the external ISA interface, and Click OK. (Fig. 2). Click Next.
5. Input the IP of the internal mail server by Clicking Find, then Browse. Highlight the mail server from the list of computers, and Click OK. Click the "Find" button to find the server's IP, and click OK. Click Next. Click Finish.

Note on the above configuration: We have found, in some cases, that it is necessary to disable the "Simple Mail Transport Protocol" service on the ISA server before it would pass SMTP traffic on to an internal mail server.

Fig. 1

Fig. 2

Suggested Resources Increase Your Skills. Decrease Your Book Prices.
Title Firewalls and Internet Security: Repelling the Wily Hacker, Second Edition Publisher Addison Description Addresses security problems, weaknesses, and the process of deploying an effective firewall. ISBN 020163466X Price Discount 20%	Title Security Complete Publisher Sybex Description Spectrum-wide supply of knowledge on keeping secure and up to date. ISBN 0782141447 Price Discount 50%

If the ISA machine is the same machine as the Email Server.

Microsoft ® recommends publishing an Exchange server running on the same machine as an ISA server through the "Secure Mail Server" wizard. To complete this task, you would simply choose (in step #5 above) "On the local host" instead of inputting the remote server's IP address.
That being said, we have found it to be somewhat more reliable to instead manually create IP Packet Filters to allow Inbound and Outbound SMTP traffic. The steps to manually create these rules are outlined below.

1. Expand: Internet Security and Acceleration Server > Servers and Arrays > <servername> > Access Policy
2. Highlight "IP Packet Filters". Right Click New > Filter...
3. Type a suitable name for the Filter, such as "Allow Inbound SMTP" (refer to the table below)
4. Ensure "Allow packet transmission" is selected. Click Next.
5. Under "Use this filter:", select "Custom". Click Next.
   
   
   
   
6. Set up the specs for the IP Packet Filter (refer to the table below). Click Next.
7. Leave "Default IP addresses for each external interface on the ISA Server computer" selected. Click Next.
8. Leave "All remote computers" selected. Click Next. Click Finish.
9. Repeat Steps 2 through 8, to create the "Allow Outbound SMTP" Filter.

Inbound SMTP Packet Filter

Outbound SMTP Packet Filter

Recommended Reading Great Books. Great Prices.
Title Inside the Security Mind: Making the Tough Decisions Publisher Prentice Hall Description Learn how the top gurus approach security. Enlighten yourself and rest your mind. ISBN 0321174070 Price Discount 20%	Title Internet and EMail Security Kit: Defeat Hackers and Viruses and Increase Network Security Publisher Syngress Description How to use security features, configurations, and methods. W2K, UNIX, Cisco, and more. ISBN 1928994288 Price Discount 50%

Linux Information

	Vote for Fusion13.com