Setting up ISA Firewall 2000

ISA Server works according to the principle: "What hasn't been explicitly allowed is by default disallowed", that's why, in order to let Web CEO work properly, you need to open in the ISA firewall the following ports: 20, 21 - FTP; 25 - SMTP; 80 - HTTP; 443 - HTTPS.

Open the "ISA server Access Policy" - > Protocol Rules.

Set up the access to the above mentioned fields. For example, 21 - FTP: Click "Create a Protocol Rule for Internet Access". In the dialog window that appears, enter the name of the new rule - "FTP Rule" and press "Next". In the next window in "Apply this Rule to:" choose "Selected protocols". In the "Protocols" list tick "FTP", then press "Next". In the net window in "Use this schedule" choose "Always" and press "Next". Then choose "Any request" and press "Next". In the dialog window that appears, press "Finish".
After that you need to set up the so-called "filters", which allow using various protocols and ports. The filters can be created in the "Access Policy " -> IP Packet Filters.

In the window "Configure Firewall Protection" choose "Create a packet filter", and enter the name of the FTP rule. In the next window it's better to choose "All ISA Server computer in the Array" by default. In the next window, choose to allow the programs working through this protocol. In the next window, "Filter Type", choose "Custom". Then, in the window "Filter Settings" fill in the protocol data:

IP protocol - TCP
Direction - Outbound
Local Port - Fixed Port
Local Port Number - 21
Remote Port - All Ports.

In the next window leave the default settings - "Default IP Addresses for each external ..." in the next window leave the default settings - "All Remote Computers".
For FTP, the 20th port might be required as well. Set it up in the way similar to the above described.
Also, to download the statistics, you will need to configure access through the HTTP protocol (port 80). Create the new rule. Enter the name for the HTTP rule. In the next window, choose "All ISA Server computer in the Array" by default. In the next window, choose to allow programs using this protocol. In the next window "Filter Type" choose "Custom". Then in the "Filter Settings" window fill in the protocol data:

IP protocol - TCP
Direction - Both
Remote Port - Fixed Port (the number of port: 80).

In the next window, leave the default setting "Default IP Addresses for each external ..." In the next window leave the default setting "All Remote Computers".
All other protocols are configured the same way.