PASSPORT Knowledge Base
PASSPORT WEB TO HOST Deployment
Date Published: July 10, 2009

Title

Configuring Web and Server Publishing Rule for Microsoft ISA 2006

Product

PASSPORT WEB TO HOST

Emulation Types

TN3270, TN5250, VT, SCO ANSI, Wyse 60

Issue

How do I configure my Microsoft ISA 2006 server to work with PASSPORT WEB TO HOST to allow my remote users to connect to our host system using only port 80 rather than opening port 23 to the public?

Solution

The background requirements and prerequisites and for Microsoft ISA 2006 server and PASSPORT WEB TO HOST is the same as its predecessor Microsoft ISA 2004.  See link:

http://www.zephyrcorp.com/web-terminal-emulator/secure-host-access.htm.  However, there are some minor configuration differences when configuring the HTTP Web Publishing rule and the Telnet Server Publishing rule.  Follow the steps below to configure the rules to work with PASSPORT WEB TO HOST:

 

Configuring a Web Publishing Rule for HTTP

  1. Start the ISA Server 2006 Management Console.
  2. Choose Firewall Policy in the left-hand pane of the console.
  3. Select the Tasks tab in the right-hand pane of the console.
  4. Choose Publish Web Sites under Firewall Policy Tasks to start the New Web Publishing Rule Wizard.
  5. Enter a name for your web publishing rule and click Next.
  6. Make sure Allow is selected for the action and click Next.
  7. Choose Publish a single Web site or load balancer and click Next.
  8. Choose Use non-secured connections to connect the published Web server or server farm and click Next.
  9. Enter the Internal site name and Computer name or IP address of the PASSPORT WEB TO HOST server or Browse to select and click Next.
  10. Click Next if you don't have an optional path. Otherwise add it here.
  11. If a domain name has been registered, you may enter it under Public Name, otherwise, enter one of the IP addresses assigned to the external interface of the ISA Server and click Next.
  12. Click the New button to start the New Web Listener Wizard.
  13. Enter a name for the Web Listener and click Next.
  14. Choose Do not require SSL secured connections with clients and click Next.
  15. Enable the check box next to the External Interface and click the Select IP Addresses… button.
  16. Choose the Specified IP addresses on the ISA Server computer in the selected network radio button, select the appropriate address to add (one of the IP addresses assigned to the external interface of the ISA Server used in step 11) then click OK then Next to finish.
  17. Select No Authentication (on Authentication Settings) then click Next®Next®Finish®Next.
  18. Choose No delegation and client cannot authenticate directly (on Authentication Delegation) and click Next.
  19. To allow anonymous access leave the All Users set in the list and click Next. To prompt users for credentials, remove All Users and replace with a user set that contains the appropriate network users.
  20. Click Finish and then Apply to save the changes.
  21. Test the web publishing rule by typing the IP address or domain name with /pec appended to the end into the address bar of Internet Explorer on a PC that is located outside the ISA Server. For example, http://myisaserver.zephyrcorp.com/pec. This should display the PASSPORT WEB TO HOST Client web page.

Configuring a Server Publishing Rule for Telnet

  1. Start the ISA Server 2006 Management Console.
  2. Choose Firewall Policy in the left-hand pane of the console.
  3. Select the Tasks tab in the right-hand pane of the console.
  4. Choose Publish Non-Web Server protocols to start the New Server Publishing Rule Wizard.
  5. Enter a name for your server publishing rule and click Next.
  6. Enter the IP address of the host and click Next.
  7. Choose Telnet Server from the Selected Protocol drop-down list and click Ports.
  8. Under Ports, choose the Publish on this port instead of the default port radio button, enter 80 for the port number, click OK then click Next.
  9. Enable the check box next to the External Interface and click the Address… button.
  10. Choose the Specified IP addresses on the ISA Server computer in the selected network radio button, select the IP address that was not used for the Web Publishing Rule above and click Add.
  11. Click OK to save and then click Next to continue.
  12. Click Finish and then click Apply to save the changes.
  13. Double-click on the new server publishing rule to display the properties page.
  14. Select the To tab and choose the Requests appear to come from the ISA Server computer radio button.
  15. Click OK and then click Apply to save the changes.
  16. Test the server publishing rule by choosing the Launch button from the PASSPORT WEB TO HOST Client page. Select 3270 Display, 5250 Display or VT Display depending on what type of session was created. Type the session name and then click Submit. This should start the session and connect to the host.

Note: this can only be tested after completing the next step.
 

 

Configuring a Session from the PASSPORT WEB TO HOST® Administrator

  1. Start the PASSPORT WEB TO HOST® Administrator application.
  2. Choose what type of session to create.
  3. Double-click Sessions in the right-hand pane.
  4. Right-click the right-hand pane and choose New from the pop-up menu.
  5. Enter a name for the session and click OK.
  6. Enter the IP address that was used to configure the server publishing rule above (step 9 & 10).
  7. Change the TCP Port from 23 to 80.
  8. Make any additional configuration changes then click OK to save.
  9. This can only be tested from a PC that is outside the ISA Server (see step 16 above).

More Information

Keywords

configure, Microsoft ISA 2006, web, server, publishing, rule, port, 23, 80