IFPCClientConfigSettings::EnableControlChannelEncryption property

Article
08/27/2012

Applies to: desktop apps only

The EnableControlChannelEncryption property gets or sets a Boolean value that indicates whether the ISA Server computer can use an encrypted control channel for communicating with Firewall clients.

Note This property is not applicable to Forefront TMG.

This property is read/write.

Syntax

HRESULT put_EnableControlChannelEncryption(
  VARIANT_BOOL fEnableControlChannelEncryption
);

HRESULT get_EnableControlChannelEncryption(
  VARIANT_BOOL *pfEnableControlChannelEncryption
);

' Data type: Boolean

Property EnableControlChannelEncryption( _
  ByVal fEnableControlChannelEncryption As VARIANT_BOOL, _
  ByVal pfEnableControlChannelEncryption As VARIANT_BOOL _
) As Boolean

Property value

Boolean value that indicates whether the ISA Server computer can use an encrypted control channel for communicating with Firewall clients.

Error codes

These property methods return S_OK if the call is successful; otherwise, they return an error code.

Remarks

This property is read/write. Its default value is True (VARIANT_TRUE in C++).

By default, ISA Server communicates with Firewall clients running the current version of the Firewall Client software over an encrypted control channel through TCP port 1745. However, Firewall clients running early versions of the Firewall Client software, including Firewall Client for ISA Server 2000 and the Winsock Proxy client (from Microsoft Proxy Server 2.0) and Firewall clients running any version of the Firewall Client software on Windows NT Server 4.0, Windows Millennium Edition, or Windows 98 cannot use an encrypted TCP control channel for communicating with an ISA Server computer.

If both this property and the SupportOldFirewallClients property are set to False (VARIANT_FALSE in C++), only Firewall clients that can use a TCP control channel are supported, but no encryption is performed. We recommend using this configuration only for troubleshooting.

This property cannot be accessed through ISA Server Management.

Requirements

Minimum supported client	Windows Vista
Minimum supported server	Windows Server 2008 R2, Windows Server 2008 with SP2 (64-bit only)
Version	Forefront Threat Management Gateway (TMG) 2010
IDL	Msfpccom.idl
DLL	Msfpccom.dll

Share via