Help with publishing an internal Windows Media Services server

[smc2005]

Hi guys,

I've been hunting the interweb trying to find a solution to this but no luck
so far. I have a Windows 2003 internal server with Media Services 9 enabled.
We can stream no problem to internal clients so I know this server is working.

I have been asked to do a trial streaming out to an external computer. The
external client is running Vista SP1 and Window Media Player 11. This
external PC is fully patched and up to date - it better be because it's mine:)

We have a 2 NIC ISA 2006 server that proxies all web traffic for our domain.
It is set up as a back firewall. NIC 1 is configured for our LAN and NIC 2 is
configured for our DMZ. All traffic goes out via NIC 2. Our front firewall is
a Cisco ASA and the DMZ is defined on one of it's interfaces.

What I have done so far is:

1. Configured a new public IP on our Cisco firewall's external interface
2. Set up a rule to forward all traffic sent to this new public IP to go to
the DMZ interface of the ISA server
3. Published two Non-Web Server Protocol Publishing Rules:
a. One listens for RTSP Server traffic on the external interface and is set
to forward such traffic to the Windows Media Services server
b. One listens for MMS Server traffic on the external interface and is set
to forward such traffic to the Windows Media Services server
4. I have set up each listener so that requests appear to come from the ISA
Server computer

When I try to connect from the external client I use the link MMS://<public
IP>/industrial.wmv. This is one of the test files and it works internally.
After a while, media player on the external client reports that the file
can't be played because a network error occured.

When I monitor connections in the ISA console from my external client's IP
address it looks like the external client is initialising a connection but
after a short while the connection is closed. As I mentioned I have trawled
google but I can't find anything that has worked. Can anyone help me here
please?

Best wishes,
Steven.

[Phillip Windell]

You need to examine the logs of the other firewall as well. Don't just
assume it would be ISA that is the problem. You need to put your "test
machine" inside the back-to-back DMZ so it can make a direct request to the
ISA's external Nic without the other firewall in the way.

Since your running ISA behind another firewall product I cannot be much
help.

Did you use the correct Protocols? MMS and RTSP are not the ones.

For Publishing you need to use "MMS Server" and "RTSP Server".
--
Phillip Windell
www.wandtv.com

The views expressed, are my own and not those of my employer, or Microsoft,
or anyone else associated with me, including my cats.
-----------------------------------------------------
Technet Library
ISA2004
http://technet.microsoft.com/en-us/library/cc302436(TechNet.10).aspx
ISA2006
http://technet.microsoft.com/en-us/library/bb898433(TechNet.10).aspx

Understanding the ISA 2004 Access Rule Processing
http://www.isaserver.org/articles/ISA2004_AccessRules.html

Troubleshooting Client Authentication on Access Rules in ISA Server 2004
http://download.microsoft.com/download/9/1/8/918ed2d3-71d0-40ed-8e6d-fd6eeb6cfa07/ts_rules.doc

Microsoft Internet Security & Acceleration Server: Partners
http://www.microsoft.com/isaserver/partners/default.mspx

Microsoft ISA Server Partners: Partner Hardware Solutions
http://www.microsoft.com/forefront/edgesecurity/partners/hardwarepartners.mspx
-----------------------------------------------------

[smc2005]

Hi Philip,

Thanks for replying. I hadn't thought of putting a test client in the DMZ so
I will give that a try. I am using RTSP Server and MMS Server as the
protocols which the published rules listen for.

I'm having the people who support the front firewall check its config as well.

Best wishes,
Steven.

Post by Phillip Windell
You need to examine the logs of the other firewall as well. Don't just
assume it would be ISA that is the problem. You need to put your "test
machine" inside the back-to-back DMZ so it can make a direct request to the
ISA's external Nic without the other firewall in the way.
Since your running ISA behind another firewall product I cannot be much
help.
Did you use the correct Protocols? MMS and RTSP are not the ones.
For Publishing you need to use "MMS Server" and "RTSP Server".
--
Phillip Windell
www.wandtv.com
The views expressed, are my own and not those of my employer, or Microsoft,
or anyone else associated with me, including my cats.
-----------------------------------------------------
Technet Library
ISA2004
http://technet.microsoft.com/en-us/library/cc302436(TechNet.10).aspx
ISA2006
http://technet.microsoft.com/en-us/library/bb898433(TechNet.10).aspx
Understanding the ISA 2004 Access Rule Processing
http://www.isaserver.org/articles/ISA2004_AccessRules.html
Troubleshooting Client Authentication on Access Rules in ISA Server 2004
http://download.microsoft.com/download/9/1/8/918ed2d3-71d0-40ed-8e6d-fd6eeb6cfa07/ts_rules.doc
Microsoft Internet Security & Acceleration Server: Partners
http://www.microsoft.com/isaserver/partners/default.mspx
Microsoft ISA Server Partners: Partner Hardware Solutions
http://www.microsoft.com/forefront/edgesecurity/partners/hardwarepartners.mspx
-----------------------------------------------------

[Phillip Windell]

Post by smc2005
Hi Philip,
Thanks for replying. I hadn't thought of putting a test client in the DMZ so
I will give that a try. I am using RTSP Server and MMS Server as the
protocols which the published rules listen for.
I'm having the people who support the front firewall check its config as well.

Very good.
Sounds like a plan.
--
Phillip Windell
www.wandtv.com

The views expressed, are my own and not those of my employer, or Microsoft,
or anyone else associated with me, including my cats.
-----------------------------------------------------
Technet Library
ISA2004
http://technet.microsoft.com/en-us/library/cc302436(TechNet.10).aspx
ISA2006
http://technet.microsoft.com/en-us/library/bb898433(TechNet.10).aspx

Understanding the ISA 2004 Access Rule Processing
http://www.isaserver.org/articles/ISA2004_AccessRules.html

Troubleshooting Client Authentication on Access Rules in ISA Server 2004
http://download.microsoft.com/download/9/1/8/918ed2d3-71d0-40ed-8e6d-fd6eeb6cfa07/ts_rules.doc

Microsoft Internet Security & Acceleration Server: Partners
http://www.microsoft.com/isaserver/partners/default.mspx

Microsoft ISA Server Partners: Partner Hardware Solutions
http://www.microsoft.com/forefront/edgesecurity/partners/hardwarepartners.mspx
-----------------------------------------------------

[unknown]

I know this post is a year old, but I am having the same exact problem (except I have no outside Cisco firewall, just the ISA). Did you come across a solution?

Thanks, been looking for this everywhere!



smc200 wrote:

Hi Philip,Thanks for replying.
27-Jan-09

Hi Philip

Thanks for replying. I hadn't thought of putting a test client in the DMZ so
I will give that a try. I am using RTSP Server and MMS Server as the
protocols which the published rules listen for

I'm having the people who support the front firewall check its config as well

Best wishes
Steven
"Phillip Windell" wrote:

Previous Posts In This Thread:

On Tuesday, January 27, 2009 6:27 AM
smc200 wrote:

Help with publishing an internal Windows Media Services server
Hi guys

I've been hunting the interweb trying to find a solution to this but no luck
so far. I have a Windows 2003 internal server with Media Services 9 enabled.
We can stream no problem to internal clients so I know this server is working

I have been asked to do a trial streaming out to an external computer. The
external client is running Vista SP1 and Window Media Player 11. This
external PC is fully patched and up to date - it better be because it's mine:

We have a 2 NIC ISA 2006 server that proxies all web traffic for our domain.
It is set up as a back firewall. NIC 1 is configured for our LAN and NIC 2 is
configured for our DMZ. All traffic goes out via NIC 2. Our front firewall is
a Cisco ASA and the DMZ is defined on one of it's interfaces

What I have done so far is

1. Configured a new public IP on our Cisco firewall's external interfac
2. Set up a rule to forward all traffic sent to this new public IP to go to
the DMZ interface of the ISA serve
3. Published two Non-Web Server Protocol Publishing Rules
a. One listens for RTSP Server traffic on the external interface and is set
to forward such traffic to the Windows Media Services serve
b. One listens for MMS Server traffic on the external interface and is set
to forward such traffic to the Windows Media Services serve
4. I have set up each listener so that requests appear to come from the ISA
Server compute

When I try to connect from the external client I use the link MMS://<public
IP>/industrial.wmv. This is one of the test files and it works internally.
After a while, media player on the external client reports that the file
can't be played because a network error occured

When I monitor connections in the ISA console from my external client's IP
address it looks like the external client is initialising a connection but
after a short while the connection is closed. As I mentioned I have trawled
google but I can't find anything that has worked. Can anyone help me here
please

Best wishes
Steven.

On Tuesday, January 27, 2009 9:57 AM
Phillip Windell wrote:

You need to examine the logs of the other firewall as well.
You need to examine the logs of the other firewall as well. Don't just
assume it would be ISA that is the problem. You need to put your "test
machine" inside the back-to-back DMZ so it can make a direct request to the
ISA's external Nic without the other firewall in the way

Since your running ISA behind another firewall product I cannot be much
help

Did you use the correct Protocols? MMS and RTSP are not the ones

For Publishing you need to use "MMS Server" and "RTSP Server"

--
Phillip Windel
www.wandtv.co

The views expressed, are my own and not those of my employer, or Microsoft
or anyone else associated with me, including my cats
----------------------------------------------------
Technet Librar
ISA200
http://technet.microsoft.com/en-us/library/cc302436(TechNet.10).asp
ISA200
http://technet.microsoft.com/en-us/library/bb898433(TechNet.10).asp

Understanding the ISA 2004 Access Rule Processin
http://www.isaserver.org/articles/ISA2004_AccessRules.htm

Troubleshooting Client Authentication on Access Rules in ISA Server 200
http://download.microsoft.com/download/9/1/8/918ed2d3-71d0-40ed-8e6d-fd6eeb6cfa07/ts_rules.do

Microsoft Internet Security & Acceleration Server: Partner
http://www.microsoft.com/isaserver/partners/default.mspx

Microsoft ISA Server Partners: Partner Hardware Solutions
http://www.microsoft.com/forefront/edgesecurity/partners/hardwarepartners.mspx
-----------------------------------------------------

On Tuesday, January 27, 2009 10:46 AM
smc200 wrote:

Hi Philip,Thanks for replying.
Hi Philip,

Thanks for replying. I hadn't thought of putting a test client in the DMZ so
I will give that a try. I am using RTSP Server and MMS Server as the
protocols which the published rules listen for.

I'm having the people who support the front firewall check its config as well.

Best wishes,
Steven.
"Phillip Windell" wrote:

On Tuesday, January 27, 2009 1:37 PM
Phillip Windell wrote:

Re: Help with publishing an internal Windows Media Services server
"smc2005" <***@discussions.microsoft.com> wrote in message news:1C50379D-56B2-4896-BFB5-***@microsoft.com...

Very good.
Sounds like a plan.
--
Phillip Windell
www.wandtv.com

The views expressed, are my own and not those of my employer, or Microsoft,
or anyone else associated with me, including my cats.
-----------------------------------------------------
Technet Library
ISA2004
http://technet.microsoft.com/en-us/library/cc302436(TechNet.10).aspx
ISA2006
http://technet.microsoft.com/en-us/library/bb898433(TechNet.10).aspx

Understanding the ISA 2004 Access Rule Processing
http://www.isaserver.org/articles/ISA2004_AccessRules.html

Troubleshooting Client Authentication on Access Rules in ISA Server 2004
http://download.microsoft.com/download/9/1/8/918ed2d3-71d0-40ed-8e6d-fd6eeb6cfa07/ts_rules.doc

Microsoft Internet Security & Acceleration Server: Partners
http://www.microsoft.com/isaserver/partners/default.mspx

Microsoft ISA Server Partners: Partner Hardware Solutions
http://www.microsoft.com/forefront/edgesecurity/partners/hardwarepartners.mspx
-----------------------------------------------------


Submitted via EggHeadCafe - Software Developer Portal of Choice
ASP.NET Providerless Custom Forms Authentication, Roles and Profile with MongoDb
http://www.eggheadcafe.com/tutorials/aspnet/27f836b7-2c9e-4942-9712-1c7b901cadcc/aspnet-providerless-custom-forms-authentication-roles-and-profile-with-mongodb.aspx

[Phillip Windell]

This NNTP group is about dead. You would be better off to ask in the
Technet Forums. One of these two should work:

http://social.technet.microsoft.com/Forums/en-US/Forefrontclientgeneral/threads

http://social.technet.microsoft.com/Forums/en-US/Forefrontclientsetup/threads

Give the details of what you have done while dealing with this. Don't just
say "I have the same problem" as someone else. The question needs to be in
its own thread..
--
Phillip Windell

The views expressed, are my own and not those of my employer, or Microsoft,
or anyone else associated with me, including my cats.
-----------------------------------------------------

Post by unknown
I know this post is a year old, but I am having the same exact problem
(except I have no outside Cisco firewall, just the ISA). Did you come
across a solution?
Thanks, been looking for this everywhere!
Hi Philip,Thanks for replying.
27-Jan-09
Hi Philip,
Thanks for replying. I hadn't thought of putting a test client in the DMZ so
I will give that a try. I am using RTSP Server and MMS Server as the
protocols which the published rules listen for.
I'm having the people who support the front firewall check its config as well.
Best wishes,
Steven.
On Tuesday, January 27, 2009 6:27 AM
Help with publishing an internal Windows Media Services server
Hi guys,
I've been hunting the interweb trying to find a solution to this but no luck
so far. I have a Windows 2003 internal server with Media Services 9 enabled.
We can stream no problem to internal clients so I know this server is
working.
I have been asked to do a trial streaming out to an external computer. The
external client is running Vista SP1 and Window Media Player 11. This
external PC is fully patched and up to date - it better be because it's
mine:)
We have a 2 NIC ISA 2006 server that proxies all web traffic for our domain.
It is set up as a back firewall. NIC 1 is configured for our LAN and NIC 2 is
configured for our DMZ. All traffic goes out via NIC 2. Our front firewall is
a Cisco ASA and the DMZ is defined on one of it's interfaces.
1. Configured a new public IP on our Cisco firewall's external interface
2. Set up a rule to forward all traffic sent to this new public IP to go to
the DMZ interface of the ISA server
a. One listens for RTSP Server traffic on the external interface and is set
to forward such traffic to the Windows Media Services server
b. One listens for MMS Server traffic on the external interface and is set
to forward such traffic to the Windows Media Services server
4. I have set up each listener so that requests appear to come from the ISA
Server computer
When I try to connect from the external client I use the link
MMS://<public
IP>/industrial.wmv. This is one of the test files and it works internally.
After a while, media player on the external client reports that the file
can't be played because a network error occured.
When I monitor connections in the ISA console from my external client's IP
address it looks like the external client is initialising a connection but
after a short while the connection is closed. As I mentioned I have trawled
google but I can't find anything that has worked. Can anyone help me here
please?
Best wishes,
Steven.
On Tuesday, January 27, 2009 9:57 AM
You need to examine the logs of the other firewall as well.
You need to examine the logs of the other firewall as well. Don't just
assume it would be ISA that is the problem. You need to put your "test
machine" inside the back-to-back DMZ so it can make a direct request to the
ISA's external Nic without the other firewall in the way.
Since your running ISA behind another firewall product I cannot be much
help.
Did you use the correct Protocols? MMS and RTSP are not the ones.
For Publishing you need to use "MMS Server" and "RTSP Server".
--
Phillip Windell
www.wandtv.com
The views expressed, are my own and not those of my employer, or Microsoft,
or anyone else associated with me, including my cats.
-----------------------------------------------------
Technet Library
ISA2004
http://technet.microsoft.com/en-us/library/cc302436(TechNet.10).aspx
ISA2006
http://technet.microsoft.com/en-us/library/bb898433(TechNet.10).aspx
Understanding the ISA 2004 Access Rule Processing
http://www.isaserver.org/articles/ISA2004_AccessRules.html
Troubleshooting Client Authentication on Access Rules in ISA Server 2004
http://download.microsoft.com/download/9/1/8/918ed2d3-71d0-40ed-8e6d-fd6eeb6cfa07/ts_rules.doc
Microsoft Internet Security & Acceleration Server: Partners
http://www.microsoft.com/isaserver/partners/default.mspx
Microsoft ISA Server Partners: Partner Hardware Solutions
http://www.microsoft.com/forefront/edgesecurity/partners/hardwarepartners.mspx
-----------------------------------------------------
On Tuesday, January 27, 2009 10:46 AM
Hi Philip,Thanks for replying.
Hi Philip,
Thanks for replying. I hadn't thought of putting a test client in the DMZ so
I will give that a try. I am using RTSP Server and MMS Server as the
protocols which the published rules listen for.
I'm having the people who support the front firewall check its config as well.
Best wishes,
Steven.
On Tuesday, January 27, 2009 1:37 PM
Re: Help with publishing an internal Windows Media Services server
Very good.
Sounds like a plan.
--
Phillip Windell
www.wandtv.com
The views expressed, are my own and not those of my employer, or Microsoft,
or anyone else associated with me, including my cats.
-----------------------------------------------------
Technet Library
ISA2004
http://technet.microsoft.com/en-us/library/cc302436(TechNet.10).aspx
ISA2006
http://technet.microsoft.com/en-us/library/bb898433(TechNet.10).aspx
Understanding the ISA 2004 Access Rule Processing
http://www.isaserver.org/articles/ISA2004_AccessRules.html
Troubleshooting Client Authentication on Access Rules in ISA Server 2004
http://download.microsoft.com/download/9/1/8/918ed2d3-71d0-40ed-8e6d-fd6eeb6cfa07/ts_rules.doc
Microsoft Internet Security & Acceleration Server: Partners
http://www.microsoft.com/isaserver/partners/default.mspx
Microsoft ISA Server Partners: Partner Hardware Solutions
http://www.microsoft.com/forefront/edgesecurity/partners/hardwarepartners.mspx
-----------------------------------------------------
Submitted via EggHeadCafe - Software Developer Portal of Choice
ASP.NET Providerless Custom Forms Authentication, Roles and Profile with MongoDb
http://www.eggheadcafe.com/tutorials/aspnet/27f836b7-2c9e-4942-9712-1c7b901cadcc/aspnet-providerless-custom-forms-authentication-roles-and-profile-with-mongodb.aspx