ISA configuration - BlackBerry Enterprise Server on SBS2K

I'm trying to get a BlackBerry server running on my SBS.

Does anyone, or anyone you know, run a BlackBerry
Enterprise Server on their SBS2K? (A "Yes" on this one
would be huge. Be my yes.)

The current headache is ISA configuration. I haven't even
installed the software, instead focusing on getting a
positive result from their connectivity test program. The
BES needs outbound access on port 3101 to BlackBerry's
servers. It also needs either a transparent proxy
connection, or outbound port forwarding.

First, port 3101. I believe I need to create 2 IP Packet
Filters - 1 TCP, 1 UDP. Here they are:

Filter Name: SRP Connection TCP
Protocol: TCP
Direction: Both (overkill - was in random tweak mode)
Local port: Fixed - 3101
Remote port: All ports
Filter applies to: Default external interface IPs
And: All remote computers

Filter Name: SRP Connection UDP
Protocol: UDP
Direction: Both
Local port: Fixed - 3101
Remote port: All ports
Filter applies to: Default external interface IPs
And: All remote computers

Doesn't that make a bigger than needed hole in my firewall?

And the transparent proxy/outbound port forwarding:
I'm at a loss, here. Can you bypass the proxy for local
requests? Should I put the firewall client on the SBS?
(that sounds evil) Is outbound port forwarding possible
with an ISA Server?

Did I ask if anyone ran a BES on their SBS2K?

TIA

Jim

danabeck
Fri Apr 30 07:44:07 CDT 2004

Hello Jim,

When you created your packet filters in ISA to test the BES functionality,
did this work? From what you have listed it should work, and if it does,
then I would focus on trying to restrict the packet filters if security is
a concern. (Direction not being Both, etc)

As for the firewall client on the server....you definitely do not want to
attempt that.

Also, from what I know of BES, it is not recommended to install/run that on
the same server that Exchange is running on. I haven't checked the latest
documentation to see if that has changed or not, but you might want to keep
that into consideration as you configure your server as well.

Regards,

Dana Becker
Microsoft Small Business Server Support

This posting is provided "AS IS" with no warranties, and confers no rights.


|
| I'm trying to get a BlackBerry server running on my SBS.
|
| Does anyone, or anyone you know, run a BlackBerry
| Enterprise Server on their SBS2K? (A "Yes" on this one
| would be huge. Be my yes.)
|
| The current headache is ISA configuration. I haven't even
| installed the software, instead focusing on getting a
| positive result from their connectivity test program. The
| BES needs outbound access on port 3101 to BlackBerry's
| servers. It also needs either a transparent proxy
| connection, or outbound port forwarding.
|
| First, port 3101. I believe I need to create 2 IP Packet
| Filters - 1 TCP, 1 UDP. Here they are:
|
| Filter Name: SRP Connection TCP
| Protocol: TCP
| Direction: Both (overkill - was in random tweak mode)
| Local port: Fixed - 3101
| Remote port: All ports
| Filter applies to: Default external interface IPs
| And: All remote computers
|
| Filter Name: SRP Connection UDP
| Protocol: UDP
| Direction: Both
| Local port: Fixed - 3101
| Remote port: All ports
| Filter applies to: Default external interface IPs
| And: All remote computers
|
| Doesn't that make a bigger than needed hole in my firewall?
|
| And the transparent proxy/outbound port forwarding:
| I'm at a loss, here. Can you bypass the proxy for local
| requests? Should I put the firewall client on the SBS?
| (that sounds evil) Is outbound port forwarding possible
| with an ISA Server?
|
| Did I ask if anyone ran a BES on their SBS2K?
|
| TIA
|
| Jim
|