Sign in
 
HomeForefront Threat Management GatewayForefront Unified Access GatewayLibraryForums
Forefront Edge Security TechCenter > Forefront Edge Security Forums > Forefront Edge Security - Publishing > publish sql2005 throught isa2004(how)
Ask a questionAsk a question
Search Forums:
 

Answerpublish sql2005 throught isa2004(how)

  • Monday, October 29, 2007 6:48 PMtesttesttew Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Sign In to Vote
    0
    Sign In to Vote
    welcome every body
i bought a real ip address from my isp provider to publish my sql server

the physical connection is as follow:

my sql server is connected to the internal network domain and switch. (it 
has 2 nic)-the internal one have the same range of the internal ip address 
and the external one have the real ip address with default gateway refer to 
my router (both nic are connected to the internal switch).

my isa server external nic is connected to router and the internal nic is 
connected to the internal switch

first of all is these connection is true or false?

second:my isa rule is as follow:
i creat a server publishing rule to allow sql traffic from (listen to 
external) to destination sql server(i enter the real ip of external nic of 
sql server)
with option (requests appear to come from the original client)

so what is wrong in the above physical or software configuration) because 
when i try to make remotedesktop connection from any netcafe to my real ip
there is no connection........

pls help
thank you so much

     

     

Answers

All Replies

  • Tuesday, October 30, 2007 5:15 AMEhab Abu Al KhairMVPUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Sign In to Vote
    0
    Sign In to Vote

    hi

    first of all what kind of connection you want  to open for Your SQL server ?

     

    if you want only a remote Desktop then you should only publish a terminal service to SQL

    http://www.isaserver.org/articles/2004pubts.html

     

    in your rules you have  a mistake on the destination IP address , it should be the ip of the internal SQL server

     

     

     
  • Tuesday, October 30, 2007 7:02 AMtesttesttew Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Sign In to Vote
    0
    Sign In to Vote

    thank you for your reply

     

    i want to make connection to my sql server from another branch to access my database

    that is what i want....

     

    thank you

     

    and what about the physical connection is it true?

     

     

     

     
  • Tuesday, October 30, 2007 1:49 PMEhab Abu Al KhairMVPUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Sign In to Vote
    0
    Sign In to Vote

    Hi

     

    You some issues here ?

     

    1- why your SQL has 2 NIC ?

    2- you said that you want to connect from another branch , that’s mean same company , so is there

      A data connection between the head office and branch ?

    3-if you don’t have a data connection  so I prefer to connect both offices using 2 ISA servers

       So the connection will be secured and managed

     

     

    Please tell what is your case to be able to tell you the proper solution

     

     
  • Tuesday, October 30, 2007 2:49 PMtesttesttew Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Sign In to Vote
    0
    Sign In to Vote

    greeting sir ,

     

    - the other branch is just a 5 computer(workgroup network) have a dsl connection to the internet

    their computers installed on them a program that should be connected to our sql database server so they will be able to make data entry and make search

     

    so their programme connection string should be modified to refer to the real ip address of our sql server

    also our web site will provide some services to customers so we need to publish our sql server to allow the customers to edit their personal data

     

     

    - when i bought my sql server it has a 2 network card so i thought that i should assigne one of them the ip address of our internal network range and thought that the other for real ip address

    (i don't know how to assign the real ip address that i bought from my isp to my sql server or it's just a rule in isa to forwored the request by mean how isa will know when it received a request for the real ip to forwored this request to the suitable internal server)

     

    pls tell me what should be the physical connection of my sql server to the network and where to assigne the real ip address or where to tell isa server to do when have a request to connect to this real ip address

     

    thank you and waiting your reply

     
  • Tuesday, October 30, 2007 7:09 PMEhab Abu Al KhairMVPUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer
    Sign In to Vote
    0
    Sign In to Vote

    Hi

    In your case you can implement the branch office  solution , and in this case you need to install

    2 isa servers one in head office and one in the branch and I do recommend this solution

    http://technet.microsoft.com/en-us/branchoffice/default.aspx

     

    and if you do the solution using 1 isa server then you need to do a proper server publishing rule

    but this need a lot of work since you need to know what ports you need to listen to be able to communicate with SQL server . and in this case you will use only one nic and assign the real ip to the External IP of isa server

    and you can checkthis article

    Publishing a SQL Server Computer with ISA Server 2004

    http://www.microsoft.com/technet/isa/2004/plan/publishingsqlwithisa.mspx