Welcome to ISAserver.org

2 ISA servers 1 outbound 1 publishing

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 General] >> General >> 2 ISA servers 1 outbound 1 publishing

Page: [1]

Message

<< Older Topic Newer Topic >>

2 ISA servers 1 outbound 1 publishing - 19.Jun.2008 4:23:42 PM

carpadm

Posts: 3
Joined: 7.Jun.2005
Status: offline

We have 2 isa 2006 servers. One is used for all outbound traffic the other is used to publish things like smtp and owa. I just added another nic to the publishing server and created a DMZ. I have a new webserver that I want to allow access to. I have created all the policies and it functions fine as long as my client machine does not point to the other isa server. As soon as I enable the other isa server for outbound web access on the client I can no longer get to the web server in the dmz. I have enabled the "internal properties" to say bypass proxy, and direct access computers.... I have added the DMZ ip addresses to the list. When I monitor the traffic on the outbound isa (1) it shows an HTTP request but the browser dies with a internal server error 500. How can I set this up?

Post #: 1

Featured Links*

RE: 2 ISA servers 1 outbound 1 publishing - 20.Jun.2008 10:36:27 AM

IanC

Posts: 237
Joined: 11.Jul.2007
From: UK
Status: offline

Have you configured the client browser to pull a configuration script from the ISA Server (proxy) either manually or automatically with WPAD?

Ian

_____________________________

Ian Currie

http://www.curriecomputing.com

Approved supplier - nAppliance(UK)
http://www.apdh64.dsl.pipex.com/currie/products.html
ISA Server 2006 SP1 3-day workshop
http://www.apdh64.dsl.pipex.com/currie/learning.html

(in reply to carpadm)

Post #: 2

RE: 2 ISA servers 1 outbound 1 publishing - 20.Jun.2008 10:44:30 AM

carpadm

Posts: 3
Joined: 7.Jun.2005
Status: offline

Yes we have. Also most clients also have the firewall client installed.

(in reply to carpadm)

Post #: 3

RE: 2 ISA servers 1 outbound 1 publishing - 23.Jun.2008 8:35:37 AM

tshinder

Posts: 47659
Joined: 10.Jan.2001
From: Texas
Status: offline

This sounds like a DNS issue. You will likely need to publish the Web Servers in the DMZ to the default Internal ISA Firewall Network. Then configure the firewall to have a NAT relationship between DMZ and Internal.That is to say, DMZ ->Internal = NAT and not the other way around.

This will solve the problem with the second firewall not being the default gateway.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to carpadm)

Post #: 4