- Start the ISA Server, or the Forefront Threat Management Gateway, Medium Business Edition Management tool.
- In the Tree pane, right-click Firewall Policy, point to New, and then click Access Rule to start the New Access Rule Wizard.
- On the Welcome page, type a name for the access rule, such as POP3 Access Rule, and then click Next.
- On the Rule Action page, click Allow, and then click Next.
- On the Protocols page, click Selected protocols in the This rule applies to list, and then click Add.
- In the Add Protocols dialog box, expand Common Protocols, and then click POP3.
- Click Add, and then click Close.
- On the Protocols page, click Next.
- On the Access Rule Sources page, click Add to open the Add Network Entities dialog box.
- Expand Networks, click
Internal, click Add, and then click
Close.
Note In this step, it is assumed that the client is part of the ISA Server-protected network that is named "Internal." If this is not the case, select the name of the network where the POP3 client resides. - On the Access Rule Sources page, click Next.
- On the Access Rule Destinations page, click Add to open the Add Network Entities dialog box.
- Expand Networks, click External, click Add, and then click Close.
- On the Access Rule Destinations page, click Next.
- On the User Sets page, click the user sets
that you want, and then click Next.
Note If you are using a Secure Network Address Translation (SecureNAT) client, you must click All users only. Additionally, this rule must be listed before any access rule that requires user authentication. For example, this rule must be listed according to the following parameters:- It must be listed before any access rule for which the All authenticated users setting has been selected.
- It must be listed before any access rule for which one
or both of the following user sets have been selected:
- Specific user groups
- Specific users
- Review the information that is on the wizard summary page, and then click Finish.
- In the Firewall Policy details pane, click Apply to apply the new access rule.
- You are using a SecureNAT client.
- The SecureNAT client cannot use the internal Domain Name System (DNS) server to resolve the name of the external POP3 server.
- Create an access rule to enable DNS lookups.
- Add the DNS protocol to the access rule that you created in steps 1 through 17.
- Open the ISA Server, or Forefront Threat Management Gateway, Medium Business Edition Management snap-in.
- In the Tree pane, right-click Firewall Policy, point to New, and then click Access Rule to start the New Access Rule Wizard.
- On the Welcome page, type a name for the access rule, such as DNS Lookups Rule, and then click Next.
- On the Rule Action page, click Allow, and then click Next.
- On the Protocols page, click Selected protocols in the This rule applies to list, and then click Add.
- In the Add Protocols dialog box, expand Common Protocols, and then click DNS.
- Click Add, and then click Close.
- On the Protocols page, click Next.
- On the Access Rule Sources page, click Add to open the Add Network Entities dialog box.
- Expand Networks, select
Internal, click Add, and then click
Close
Note In this step, it is assumed that the client is part of the ISA Server-protected network that is named "Internal." If this is not the case, select the name of the network where the POP3 client resides. - On the Access Rules Sources page, click Next.
- On the Access Rule Destinations page, click Add to open the Add Network Entities dialog box.
- Expand Networks, click External, click Add, and then click Close.
- On the Access Rule Destinations page, click Next.
- On the User Sets page, click the user sets
that you want, and then click Next.
Note If you are using a SecureNAT client, you must select All users only. Additionally, this rule must be listed before any access rule that requires user authentication. For example, this rule must be listed according to the following parameters:- It must be listed before any access rule for which the All authenticated users setting has been selected.
- It must be listed before any access rule for which one
or both of the following user sets have been selected:
- Specific user groups
- Specific users
- Review the information that is on the wizard summary page, and then click Finish.
- In the Firewall Policy details pane, click Apply to apply the new access rule.
