I spent some time yesterday upgrading my SBS2003 home network to SP1.  The document written by the SBS MVP’s on “How to Install Service Pack 1 for SBS 2003” was very helpful in this regard. Thank You!

I currently have a networked Tivo in my home network which I moved to a land line some time ago, primarily so that I could beef up the security on my wireless network.  The Tivo firmware STILL does not support anything more than WEP and I most definitely was not comfortable with the “security” of WEP.  The key point with having the Tivo on the home network is that, if you want it to use the network to connect to the Tivo service, you need to set it up as a SecureNAT client.

In ISA Server 2004 2000, in addition to setting it up as a SecureNAT client, I had to open the out-bound TCP ports 1026, 4006 and 8080 for the Tivo to connect to the service. The great thing in ISA 2004 was that I could get rid of all of those extra items that I needed to set up. 

In ISA Server 2004:

• Internet Access Firewall Policy: Tivo => External Network
  External network is predefined in ISA and I added the Tivo as a Computer Network Object
• Protocol == All Out-bound Traffic
• Condition == All Users
  All Users group includes both authenticated and unauthenticated users. The SecureNAT client is an unauthenticated user.
• Go into the HTTP Protocol and disable the “Web Proxy”  Application Filter.

The above limits unauthenticated users to the Tivo box which is now on a closed land line network which I physically control.  All other machines in the network require authentication and utilize the ISA 2004 Firewall client.