Welcome to ISAserver.org

Can't Resolve Name through SSL VPN behind ISA

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Firewall] >> VPN >> Can't Resolve Name through SSL VPN behind ISA

Page: [1]

Message

<< Older Topic Newer Topic >>

Can't Resolve Name through SSL VPN behind ISA - 23.Sep.2008 8:50:09 AM

wasu

Posts: 3
Joined: 23.Sep.2008
Status: offline

Behind my ISA, I can login to a website. After I get into a link on that domain it asks me to install ActiveX, says, Cisco SSL VPN. Installation is ok. but after it pops up a new windows with new url (can't resolve name publicly). IE says DNS error.

Without ISA. Everything go on as above. But I can get in the pop up url.

What really prevent my access to that web, I don't know. Please help!

Post #: 1

Featured Links*

RE: Can't Resolve Name through SSL VPN behind ISA - 23.Sep.2008 9:31:20 AM

pwindell

Posts: 802
Joined: 12.Apr.2004
From: Taylorville, IL
Status: offline

If this is the Cisco VPN Client in ActiveX firm then this is not the "web" you.

You are going to have to explain everything much more clearly. Picture yourself as never knowing anyting about this, don't have a clue, and someone is going to explain it to you,...and you are wearing a blindfold,...what would they have to tell you for you to understand?

_____________________________

Phillip Windell
www.wandtv.com

(in reply to wasu)

Post #: 2

RE: Can't Resolve Name through SSL VPN behind ISA - 23.Sep.2008 9:50:43 AM

wasu

Posts: 3
Joined: 23.Sep.2008
Status: offline

Thanks for comment.

My connection look like this:

pc---ISA---internet---(fw---webserver ---cisco---webserver this I'm not sure)

- I want to connect to a web site and I can connect normally through ISA2006.
- After login, there are several links and I can access all links within the same domain (abc.xyz.com/...).
- There are some links which will redirect me a webpage and it asks me to install activex from cisco (ssl vpn).
- After install that activex it redirect me to a new domain (def.xyz.com) which i got the DNS errors
- I have ask someone there they said the def.xyz.com does not exist in the public DNS but it's in there own DNS

I tried with the connection without ISA. I can get to the def.xyz.com.

So I don't know how to config ISA to allow me to get to def.xyz.com. I allow all outbound protocol for the *.xyz.com but that didn't work. And I come here.

(in reply to pwindell)

Post #: 3

RE: Can't Resolve Name through SSL VPN behind ISA - 23.Sep.2008 11:30:53 AM

pwindell

Posts: 802
Joined: 12.Apr.2004
From: Taylorville, IL
Status: offline

quote:

- I have ask someone there they said the def.xyz.com does not exist in the public DNS but it's in there own DNS

Then they can't expect you to use it. It has to be in Public DNS for you to use it.

_____________________________

Phillip Windell
www.wandtv.com

(in reply to wasu)

Post #: 4

RE: Can't Resolve Name through SSL VPN behind ISA - 23.Sep.2008 11:44:48 AM

wasu

Posts: 3
Joined: 23.Sep.2008
Status: offline

Thank you pwindell. I really don't know about this. But when I use the public IP to access that web, I can do. But with ISA, I can't. I try to search the forum about DNS and SSL VPN issues. Don't find the same case yet.

Please help suggest or tell the place I can find more information.

(in reply to pwindell)

Post #: 5