How do I open ports on an ISA, and do I need to?

Our system is protected by a PIX firewall and a MS 2000 ISA Server. I did not install either so know very little about how to configure them. I believe that the ISA server over-rides/supercedes the protection from the PIX as it was installed much later but I could be wrong abouth this.

I need to access a webpage that contains a control panel for administering a website, but cannot access it from this network. I have tried from an ordinary dial-up connection and get in without any problem.

The support department at the web hosting company tell me I need to free up ports 8087 and/or 8080 for the control panel and port 2096 for the secure webmail.

I have full access to the ISA server and PIX, but dont want to start messing around with them without knowing what I am doing.


Could someone kindly talk me through the steps needed to open these ports, and tell me if I need to open them on both the ISA and PIX, or just one of the devices.

I will get round to learning more about them, but I need access to the website stuff sooner rather than later.

Thanks in advance

 

You'll need to open the ports on both. But with the ISA server, you can specify exactly who has access to the ports and that would be a good additional safeguard.

Take a look Here. Page is designed to be a comparison of ISA server and the ICF (internet connection firewall) but contains the best quick-list of ISA Server features I've seen.

Is there any reason other than intetia for running both the PIX product and ISA Server?

Is the ISA server patch-current? Slammer and some other recent baddies could get in the original but M$ has done a good job of patching against threats they know of.

 

thanks for the link, it led me onto www.isaserver.org which seems to have a mass of info for configuration, although I will most likely be posting back later for help in opening up ports on the PIX.

We have both ISa and PIX purely because the PIX was there first and was never taken out when the ISa was put in, but I suppose an extra layer of seurity cant hurt.

Thanks for reminding me about patches, I have already patched all Os's against the latest stuff but had forgotten about ISA specific patches.