Windows Small Business Server(SBS), PC Anywhere With ISA2004

Hello,

Does anyone have any ideas on how to get PC Anywhere 10.5 to pass through
ISA2004 from the External network to a single pc on the internal network? I
have added ports 5631 and 5632 for both UDP(Receive/Send) & TCP and have
created and access rule from external to internal and I am getting a
onnection Deniedin ISA monitoring.

Thanks

OK, I'm curious. Why in the world would you want to allow this on your
network? You have RWW, you even have regular RDP.

--
Charlie.
http://msmvps.com/blogs/xperts64

I'd have to agree with Charlie Again, (Even though he spells his last name
wrong ) LOL

But I do understand that some companies like to spend money!
PC ANYwhere is one of them, and Ferraris is another ;)

RWW is Free VS PC ANYWhere $100.0

Instuctions here
http://www.isaserver.org/tutorials/Publishing_a_host_using_PCAnywhere_behind_ISA.html

Russ

--
Russell Grover
SBITS.Biz
Enterprise Solutions for Small Business
Microsoft Certified Small Business Specialist.
MCP, MCPS MCNPS, (MCP-SBS)
Portland/Beaverton Oregon USA
Support @ SBITS.Biz
http://www.SBITS.Biz

I completely understand. It is out of my hands. Corporate uses it to manage
a pc on the internal network of this sbs server through a VPN router that is
in front of the external nic of the server. My choices were to either remove
ISA or get it working.

I won't even go there. But I understand. Russ has given you a link to
directions for doing it.

--
Charlie.
http://msmvps.com/xperts64

You gotta love these responses. I too have this situation with some clients
that I support. Here are two ways to do this:

Option 1. Muliple Public IP addresses bound to External Card

Step #1: Bind additonal public IP addresses to the Outside NIC

Step 2: Setup two protocols in ISA 2004
a) PcAnywhere - TCP 5631 Inbound
Port Range: 5631
Protocol Type: TCP
Direction: Inbound
b) PcAnywhere - UPD 5632 Rec/Send
Port Range: 5632
Protocol Type: UDP
Direction: Inbound

Step 3: Define two Server Publishing Rules
Rule #1: PcAnywhere for ???? - 5631 TCP Inbound (??? being a PC name)
Action: Allow
Traffic: Pick Protocol (a) from above
From: Anywhere
To: Pick IP address of internal client (should be fixed, I use a DHCP
reservation)
Networks: External and choose only the appropriate public IP address
that is additionally bound to the outside NIC.

Rule #2: PcAnywhere for ??? - 5632 UDP Rec/Send
Action: Allow
Traffic: Pick Protocol (b) from above
From: Anywhere
To: Pick IP address of internal client (should be fixed, I use a DHCP
reservation)
Networks: External and choose only the appropriate public IP address
that is

Step #4: Setup the client Host and have the remote connect to the public IP
address above

You will need a separate public IP address and the two rules for each
internal PC Host. The protocol rules can be reused.

Option #2: Using only one External IP address

Setup pairs of (a) and (b) protocols from above, if multiple hosts are
needed. Use 5631,5632, then 5633, 5634, etc ...

Then setup the two Server Pub Rules but this time choose the appropriate
pair of ports and assign the rule to the corresponding internal client. The
only downside to this method is the remote will need to modify the standard
5631,5632 port setup when defineing the remote connection. Since we are only
using one IP address the port pairs are the only way to differentiate the
traffic and map it to an internal PC.

I hope this helps,

--
Frank Stumpo

Frank Stumpo

I am not an IT expert but Remote desktop doesnot gives you option of
simaltanous login as some one access my PC wiTH RDA my screen goes blank,
however with pcanywhere we can share screen work and discuss it.

Yes. So use Remote Assistance - that gives you simultaneous. ;)

--
Charlie.
http://msmvps.com/xperts64