Want to allow only specific traffic to specific ports (not a large range), how to...

[she...@gmail.com]

Hello,

I have a specific configuration I want with ISA 2004 and have run into
some difficulty:

Today I have an ISA server w/2 NICs running in a VM. I have on XP SP2
VM on a private virtual network that the ISA server also has access to
via one NIC. The second NIC on the ISA server is bound to the physical
NIC on the external network.
I have ISA setup now to basically pass all data through (and have
tested this with my XP client and IE, no proxy setting = no access to
W3, proxy setting yes = W3 access).

So now that I have a basic firewall/proxy going I want to do this:

Restrict all HTTP traffic to the following ports (only):
80
88
9035

All HTTPS traffic:

99
443
9035

I first tried to just create a few HTTP and HTTPS rules but that
failed, no traffic was passing through.
So now I have a 50.00 book that tells me lots, just not about what I
want to do (or if it's possible). Now this book isn't a waste, I am
thinking I might need to publish the web server or publish an app (port
9035 = application I am testing).

Am I on the right path, can I do what I have outlined above? Can I go
even deeper w/Security and not only allow traffic port 9035 pass
through, but then restrict that communication to a specific application
on the XP client system to my W3 server?

Thanks,

Joel