AIM/MSN Messenger don't work with ISA?

[NipsMG]

I'm currently setting up ISA, and I'm testing some things out.

I set up protocol rules to allow certain users on the domain to use the "AOL Instant Messenger" protocol, and the "MSN Messenger" protocol, have them set to "Allow", and the schedule is "Always".

I also have it set up so the same users can only visit the sites specified.

The HTTP part works, and allows the users to only access specific sites when the Firewall Client is installed locally. s-)

However, no matter what i do, AIM/MSN DO NOT WORK.

Anyone have any ideas on this?
I'd appreciate any help I can get.

Thanks in advance.

--Michael Gerety

 

[cozylad]

Hi Michael

We do have the same problem that we cannot use MSN through the ISA server ---- did u resolve the problem by any change

thx
ronnie

 

[SpiritedTechnologies]

I am having same problem with all instant messengers. Anyone know a solution for this? (ISA2000)
Does anyone know how the firewall client works?

 

[embj]

To fix both AIM and MSNo go into the ISA Management, go to Client Configuration, and open up the properties for the Firewall Client. Then, click on Applications Settings, and create a new setting. You'll need to create a setting for both AIM and MSN. In the application field you'll need to set it to "aim" (no quotes), set the key to Disable, and set the value to 1.

You'll need to do the same for MSN, except in the application field you'll need to specify "msnmsgr" (again, without the quotes). Then, you'll need to refresh the rules on each of the firewall clients.

 

[SpiritedTechnologies]

Thank you embj. Have a couple of questions. Is the 'aol' and 'msnmgr' hard coded into ISA2000 or do I have to make sure that my Protocols are named such, or how can this setting be associated with a port number? Also what to do about other protocol that I wish to open like YahooIM

What is it if a man inherits the whole world but loses his soul? -Jesus

 

[embj]

The "aim" and "msnmsgr" just allow those certain programs to access the internet...the same would apply for any other application that you have that needs internet access. The reason ISA doesn't allow those messengers to access the internet is because they are disabled by default. By setting the value to 1, you are enabling them...if you set the value to 0, you are disabling them.

If you need Yahoo, just specify the name of the Yahoo client (whatever it may be...I'm not sure) in the applications in place of "aim". Whatever application you need to access the internet, just specify the name of the exe as the application name.

Now, that I just looked at it, you do need to specify the protocol in the access policy. You only need to do that with AIM (most likely Yahoo...not sure). MSN should go through without a protocol rule being specified.

To limit the use of the protocol rule, just set it for the group of users that you allow to access the internet.

Also, for example, Outlook is the same way...it needs to be enabled in the firewall client settings under the application name of Outlook with Disable set to 1.