Microsoft Proxy Server 2.0 or Internet Security and Acceleration (ISA) Server 2000

The LiveVault Online Backup Service can be set up in a Microsoft Proxy Server 2.0/ISA 2000 environment where:

• The LiveVault Online Backup Service Agent machine is always "inside" the Proxy Server.

• The LiveVault Online Backup Service Agent machine is a Winsock Proxy Client.

A LiveVault Online Backup Service Agent communicates with its backup server via an LV Internet Gateway (LVIG). The LiveVault Online Backup Service Agent always initiates the connection to its backup server, so there are no listens that need to be bound at the Proxy Server.

Note: If your LiveVault Online Backup Service Agent machines are behind both an MS Proxy Server and a firewall, contact Customer Service for assistance. Also, if you are running LiveVault Online Backup Service Agent 3.1.2 or earlier, contact Customer Service for assistance.

I. MS Proxy Server 2.0 requirements

To set up the LiveVault Online Backup Service in an MS Proxy Server 2.0 environment, the following are required:

• MS Proxy Server 2.0 Service Pack 1 (SP1) is installed on the Proxy Server.

• MS Proxy Server 2.0 SP1 is running on all Winsock Proxy Clients. 

• Winsock proxy is enabled and running on the Proxy Server.

• MS Winsock Proxy Client must be configured on each LiveVault Online Backup Service Agent machine before you install the LiveVault Online Backup Service Agent software. This is required so that Health Check utility (lvhealth) that runs during installation can correctly identify the ports open on the Proxy Server. 

II. Configuring your environment for the LiveVault Online Backup Service

To set up the LiveVault Online Backup Service in an MS Proxy Server 2.0 environment, you must make the following changes at all sites running the LiveVault Online Backup Service:

A. Add LiveVault Online Backup Service Agent IP addresses to the Local Address Table on the Proxy Server

Configure the Local Address Table (LAT) to include the IP address of all machines that are "inside" the Proxy Server and running the LiveVault Online Backup Service Agent. 

If the machines are dual-homed or have multiple NIC cards, you may need to add the IP addresses assigned to these as well. 

Do not include the IP address of any machines that are "outside" the Proxy Server (See Reference 1 for more details).

B. Edit the MSPCLNT.ini file on the Proxy Server

On the Proxy Server machine edit the mspclnt.ini file to include application settings for the services lvwflo, nisvc, and lvlogservice.

Note: Alternatively, you may create a client specific file (wspcfg.ini) containing these entries. The file would be located in the LiveVault Online Backup Service installation directory (e.g.: C:\Program Files\LiveVault Corporation\LiveVault) on each machine that is running the Winsock Proxy Client.

MS Proxy Server 2.0

If you are running the MS Proxy Server 2.0, edit the mspclnt.ini file located in the WinSock Proxy Client installation directory to include the following entries:

[nisvc]
Disable=1

[lvwflo]
LocalBindTcpPorts=1024-5000,20491
LocalBindUdpPorts=20490,20491

[lvlogservice]
Disable=1

Then update each Winsock Proxy Client's configuration file (go to Control Panel, choose  WSP Client , and click Update Now). This downloads the Proxy Server based configuration file to each proxy client. You will be required to restart Windows after this update.

ISA 2000

If you are running ISA 2000, do the following on the Proxy Server:

1. Load ISA Management, choose Client Configuration, right-click on Firewall Client, and choose Properties.

2. Click the Application Settings tab, choose New, and create a new set of application settings for lvwflo, nisvc, and lvlogservice:

   • For lvwflo:

     1. Type lvwflo in the Application field.

     2. Choose the key LocalBindTcpPorts from the drop-down.

     3. Type 1024-5000 in the Value field.

     4. Click OK.

     5. Choose New again, and type lvwflo in the Application field.

     6. Choose the key LocalBindUdpPorts from the drop-down.

     7. Type 20490,20491 in the Value field.

     8. Click OK.

   • For nisvc:

     1. Type nisvc in the Application field.

     2. Choose the key Disable from the drop-down.

     3. Choose the value 1 from the drop-down.

   • For lvlogservice:

     1. Type lvlogservice in the Application field.

     2. Choose the key Disable from the drop-down.

     3. Choose the value 1 from the drop-down.

3. Restart each Winsock Proxy Client. The client's mspclnt.ini file is automatically updated after restarting.

C. Grant lvwfloservice's user account access to the Proxy Server

If access control is enabled on your Proxy Server, then you must set up LiveVault Online Backup Service's lvwfloservice to run under a user account (not the local system account).

This user account must be granted access to the Proxy Server. It must be granted the "login as a service" right; it does not require other rights.

These settings are dependent on your configuration; Customer Service is available to work with you to ensure the required minimum rights have been granted.

III. References

1. MS proxy Server 2.0 Documentation - Administering Clients

2. Download Proxy Server 2.0 SP 1 from:

   NT 4.0: 

   http://www.microsoft.com/proxy/downloads/DLServicePack1.asp 

   Windows 2000/2003:

   http://www.microsoft.com/proxy/downloads/DLWindows2000HotFix.asp