EnableControlChannelEncryption Property of the IFPCClientConfigSettings Interface

Article
08/13/2010

The EnableControlChannelEncryption property gets or sets a Boolean value that indicates whether the ISA Server computer can use an encrypted control channel for communicating with Firewall clients.
Note This property is not applicable to Forefront TMG.

C++

HRESULT put_EnableControlChannelEncryption(
    VARIANT_BOOL fEnableControlChannelEncryption
);
HRESULT get_EnableControlChannelEncryption(
    VARIANT_BOOL* pfEnableControlChannelEncryption
);

Parameters

fEnableControlChannelEncryption
Boolean value that indicates whether the ISA Server computer can use an encrypted control channel for communicating with Firewall clients.
pfEnableControlChannelEncryption
Pointer to a Boolean variable that is set on return to VARIANT_TRUE if the ISA Server computer can use an encrypted control channel for communicating with Firewall clients, or to VARIANT_FALSE if the ISA Server computer must use an unencrypted control channel for communicating with Firewall clients.

Return Value

These property methods return S_OK if the call is successful; otherwise, they return an error code.

Visual Basic

Property EnableControlChannelEncryption As Boolean

Property Value

Boolean value that indicates whether the ISA Server computer can use an encrypted control channel for communicating with Firewall clients.

Remarks

This property is read/write. Its default value is True (VARIANT_TRUE in C++).

By default, ISA Server communicates with Firewall clients running the current version of the Firewall Client software over an encrypted control channel through TCP port 1745. However, Firewall clients running early versions of the Firewall Client software, including Firewall Client for ISA Server 2000 and the Winsock Proxy client (from Microsoft Proxy Server 2.0) and Firewall clients running any version of the Firewall Client software on Windows NT Server 4.0, Windows Millennium Edition, or Windows 98 cannot use an encrypted TCP control channel for communicating with an ISA Server computer.

If both this property and the SupportOldFirewallClients property are set to False (VARIANT_FALSE in C++), only Firewall clients that can use a TCP control channel are supported, but no encryption is performed. We recommend using this configuration only for troubleshooting.

This property cannot be accessed through ISA Server Management.

Requirements

Client	Requires Windows 7 or Windows Vista.
Server	Requires Windows Server 2008 R2 or Windows Server 2008 x64 Edition with SP2.
Version	Requires Forefront Threat Management Gateway (TMG) 2010.
IDL	Declared in Msfpccom.idl.
DLL	Requires Msfpccom.dll.

Share via