TCP, Firewall, Certificates - Question
Windows Server Forum Index Windows Server
Server discussion on Windows platform.
 
 FAQFAQ   MemberlistMemberlist     RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 
 
Google
 
Web winserverhelp.com
TCP, Firewall, Certificates - Question

 
Post new topic   Reply to topic    Windows Server Forum Index -> Live Communications Server
Author Message
Steve
Guest





Posted: Mon Jan 03, 2005 8:15 pm    Post subject: TCP, Firewall, Certificates - Question Reply with quote

In the midst of setting up LCS 2005 SE
Network is 1 LCS, 1 forest, 1 domain, Windows Messanger 5.1
Multiple subnets but they are firewalled

I know you can run a single LCS using TCP for client-server communication.

However, I thought that TCP could not traverse a firewall???

I was under the impression that in order to traverse a firewall the
client-server communication had to be TLS.

Anyone know if this is true or if there is a way around this so you can use
TCP in a VERY firewall segmented network?
Back to top
Dhigha D Sekara
Guest





Posted: Fri Jan 07, 2005 3:07 am    Post subject: Re: TCP, Firewall, Certificates - Question Reply with quote

Steve,

WM 5.1 was modifed to work with NATs underTCP.

LCS 2005 supports a pool model where clients can sign in via a NAT-ed Load
balancer. WM5.1 clients will be able to sign in to a LCS 2005 pool via a LB.

Thanks,
dhigha




--
This posting is provided "AS IS" with no warranties, and confers no rights.
Please do not send email to this address, post a reply to this newsgroup

"Steve" <Steve@discussions.microsoft.com> wrote in message
news:9B1E7E2E-84B3-4996-B4ED-60648ECD88B1@microsoft.com...
Quote:
In the midst of setting up LCS 2005 SE
Network is 1 LCS, 1 forest, 1 domain, Windows Messanger 5.1
Multiple subnets but they are firewalled

I know you can run a single LCS using TCP for client-server communication.

However, I thought that TCP could not traverse a firewall???

I was under the impression that in order to traverse a firewall the
client-server communication had to be TLS.

Anyone know if this is true or if there is a way around this so you can
use
TCP in a VERY firewall segmented network?
Back to top
Steve
Guest





Posted: Sun Jan 09, 2005 7:31 am    Post subject: Re: TCP, Firewall, Certificates - Question Reply with quote

Dhigha,

Thank you for that info. Is that documented somewhere (I must have missed
it on MS's site)?

Was that the only reason TCP didn't traverse a firewall? I thought it was
also because within IP Payloads (for SIP) the IP and/or Port info is stored
and a firewall can't open the payload to determine this info?

"Dhigha D Sekaran<msft>" wrote:

Quote:
Steve,

WM 5.1 was modifed to work with NATs underTCP.

LCS 2005 supports a pool model where clients can sign in via a NAT-ed Load
balancer. WM5.1 clients will be able to sign in to a LCS 2005 pool via a LB.

Thanks,
dhigha




--
This posting is provided "AS IS" with no warranties, and confers no rights.
Please do not send email to this address, post a reply to this newsgroup

"Steve" <Steve@discussions.microsoft.com> wrote in message
news:9B1E7E2E-84B3-4996-B4ED-60648ECD88B1@microsoft.com...
In the midst of setting up LCS 2005 SE
Network is 1 LCS, 1 forest, 1 domain, Windows Messanger 5.1
Multiple subnets but they are firewalled

I know you can run a single LCS using TCP for client-server communication.

However, I thought that TCP could not traverse a firewall???

I was under the impression that in order to traverse a firewall the
client-server communication had to be TLS.

Anyone know if this is true or if there is a way around this so you can
use
TCP in a VERY firewall segmented network?


Back to top
Dhigha D Sekara
Guest





Posted: Tue Jan 11, 2005 1:29 pm    Post subject: Re: TCP, Firewall, Certificates - Question Reply with quote

I guess it is called out in the Loadbalancer deployment section of the
documentation.

There were some minor protocol modifications made to make it work.

--
This posting is provided "AS IS" with no warranties, and confers no rights.
Please do not send email to this address, post a reply to this newsgroup

"Steve" <Steve@discussions.microsoft.com> wrote in message
news:2D5C5C7E-4E8C-4036-8620-34EA7A124F98@microsoft.com...
Quote:
Dhigha,

Thank you for that info. Is that documented somewhere (I must have missed
it on MS's site)?

Was that the only reason TCP didn't traverse a firewall? I thought it was
also because within IP Payloads (for SIP) the IP and/or Port info is
stored
and a firewall can't open the payload to determine this info?

"Dhigha D Sekaran<msft>" wrote:

Steve,

WM 5.1 was modifed to work with NATs underTCP.

LCS 2005 supports a pool model where clients can sign in via a NAT-ed
Load
balancer. WM5.1 clients will be able to sign in to a LCS 2005 pool via a
LB.

Thanks,
dhigha




--
This posting is provided "AS IS" with no warranties, and confers no
rights.
Please do not send email to this address, post a reply to this newsgroup

"Steve" <Steve@discussions.microsoft.com> wrote in message
news:9B1E7E2E-84B3-4996-B4ED-60648ECD88B1@microsoft.com...
In the midst of setting up LCS 2005 SE
Network is 1 LCS, 1 forest, 1 domain, Windows Messanger 5.1
Multiple subnets but they are firewalled

I know you can run a single LCS using TCP for client-server
communication.

However, I thought that TCP could not traverse a firewall???

I was under the impression that in order to traverse a firewall the
client-server communication had to be TLS.

Anyone know if this is true or if there is a way around this so you can
use
TCP in a VERY firewall segmented network?


Back to top
 
Post new topic   Reply to topic    Windows Server Forum Index -> Live Communications Server All times are GMT
Page 1 of 1

 
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum




New Topics Powered by phpBB