Welcome to ISAserver.org

Alternate SSL Port through ISA

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> General >> Alternate SSL Port through ISA

Page: [1]

Message

<< Older Topic Newer Topic >>

Alternate SSL Port through ISA - 6.Mar.2008 1:21:23 PM

acemcgee

Posts: 21
Joined: 21.Mar.2003
Status: offline

How can you get ISA to use an alternate SSL port for a secure website.

I want to use 444 for a SSL website to go through the ISA server.

Thanks for the help.

Post #: 1

Featured Links*

RE: Alternate SSL Port through ISA - 7.Mar.2008 7:44:59 AM

gbarnas

Posts: 147
Joined: 27.Apr.2005
From: New Jersey
Status: offline

Did you search this site for SSL articles?

You might want to review this one: http://www.isaserver.org/articles/2004tunnelportrange.html

I followed this article for an ISA 2006 server when we published an SSL application on a range of ports at 22050.

Glenn

(in reply to acemcgee)

Post #: 2

RE: Alternate SSL Port through ISA - 7.Mar.2008 4:32:39 PM

acemcgee

Posts: 21
Joined: 21.Mar.2003
Status: offline

Glenn,
Did you use this to allow outside people to hit an ssl website that you are hosting behind an ISA firewall?

Thanks

(in reply to acemcgee)

Post #: 3

RE: Alternate SSL Port through ISA - 8.Mar.2008 8:27:22 AM

gbarnas

Posts: 147
Joined: 27.Apr.2005
From: New Jersey
Status: offline

In my environment, the SSL cert is on the ISA, listening on port 22050. ISA communicates via HTTP to the internal Apache server, which does not use SSL.

This is an EDI type of application, which is why we did not use a standard web port.

Glenn

(in reply to acemcgee)

Post #: 4

RE: Alternate SSL Port through ISA - 10.Apr.2008 7:46:55 PM

acemcgee

Posts: 21
Joined: 21.Mar.2003
Status: offline

Glenn,
I am trying to get it SSL to ISA and then SSL to the server. I notice that I can not change the HTTPS to anything other the 443. I have it set up but keep getting the following message now.

Error Code: 500 Internal Server Error. The target principal name is incorrect. (-2146893022)

I have looked in the logs but everything looks perfect and supposed to be going to the right place. I have used the tool that you mentioned earlier and have put the 444 port into the list of ports. I am not getting the unknown SSL port message anymore now I am just getting the above message. There must be a way to get a different SSL port to go through the ISA firewall. Does anybody know where I can find some more information on this.

Glenn - Again thank you for your help.

Thanks for all the help.

(in reply to gbarnas)

Post #: 5