If the Safe Access server is between my domain controller and the client devices being tested, what do I need to configure in Safe Access so client devices can access normal domain services?

Answer:
Devices are able to access the domain services if Safe Access is configured to allow traffic to pass through the specific ports that the domain controller will use. For example, a Windows 2003 server with an IP address of 115.17.4.10 can be configured in Safe Access as follows:

1. From the Safe Access main window, click Configure system button.
2. Click the Quarantine tab.
3. In the Accessible services and devices field, enter the following:
   • 115.17.4.10:88
   • 115.17.4.10:135
   • 115.17.4.10:136
   • 115.17.4.10:137
   • 115.17.4.10:138
   • 115.17.4.10:139
   • 115.17.4.10:389
   • 115.17.4.10:1025
4. Click OK to save the changes.

This change now allows traffic on ports 88, 135, 136, 137,138, 138, 389 and 1025 (the ports commonly used by a Windows 2003 domain controller) to flow through the Safe Access server and onto the domain controller.