Welcome to ISAserver.org

Client needing access to two different proxies

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> General >> Client needing access to two different proxies

Page: [1]

Message

<< Older Topic Newer Topic >>

Client needing access to two different proxies - 17.Aug.2005 3:09:00 PM

jalcala

Posts: 32
Joined: 12.Aug.2005
Status: offline

OK here is the situation:

Network infrastructure:
My network (Network A) with ISA protecting front door access to Internet
Network A has access to Network B via dedicated LAN line with Proxy Server at gateway to Network B

Client 1 on Network A has an application installed on it that needs to be directed toward proxy on Network B for access.

Has anyone worked in a network where a client needed to use two different proxies for accessing resources (1 being Internet and the otehr being another network)?

Visual for you:

Network B Proxy for app <-- Client 1 --> Network A for Internet

Thanks.

Post #: 1

Featured Links*

RE: Client needing access to two different proxies - 17.Aug.2005 3:34:00 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi jalcala,

one solution is to use the following design:

code:

Client --- [ ISA2004 ] --- Internet
                !
                +--- [ Proxy] --- Network B

In this scenario you can configure the Proxy on Network B as upstream proxy server on the ISA 2004. You can do that in Configuration -> Networks -> Web Chaining.

HTH,
Stefaan

(in reply to jalcala)

Post #: 2

RE: Client needing access to two different proxies - 17.Aug.2005 3:45:00 PM

jalcala

Posts: 32
Joined: 12.Aug.2005
Status: offline

Only problem is I do not administer Network B, someone elses network. Trying to figure out a way to do this on the client. Does the Firewall client have the option to specify which applications can use which firewall?

(in reply to jalcala)

Post #: 3

RE: Client needing access to two different proxies - 17.Aug.2005 3:51:00 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi jalcala,

aren't you managing network A with the ISA 2004 server? [Confused]

The device Proxy and Network B are just some destinations for ISA 2004, reachable through a specific interface. So, you can centralize all the configuration issues on the ISA 2004 server.

HTH,
Stefaan

(in reply to jalcala)

Post #: 4

RE: Client needing access to two different proxies - 17.Aug.2005 3:52:00 PM

Guest

you could by bass proxy for local access and specify in ie

is it a web app?

(in reply to jalcala)

Post #: 5

RE: Client needing access to two different proxies - 17.Aug.2005 3:59:00 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi raxip,

yes, you can configure some destinations for direct access but that's not the same as configuring a specific proxy server for those destinations.

HTH,
Stefaan

(in reply to jalcala)

Post #: 6

RE: Client needing access to two different proxies - 17.Aug.2005 4:21:00 PM

jalcala

Posts: 32
Joined: 12.Aug.2005
Status: offline

quote:
Originally posted by spouseele:
Hi jalcala,

aren't you managing network A with the ISA 2004 server?
The device Proxy and Network B are just some destinations for ISA 2004, reachable through a specific interface. So, you can centralize all the configuration issues on the ISA 2004 server.

HTH,
Stefaan

Yeah I am managing Network A with ISA 2004. I need to familerize myself with web chaining, thanks for the input Stefaan. I will defiently keep you posted on my progress.

(in reply to jalcala)

Post #: 7

RE: Client needing access to two different proxies - 23.Aug.2005 10:39:00 AM

jalcala

Posts: 32
Joined: 12.Aug.2005
Status: offline

Well got side tracked on this issue and just now getting back to it. I got the split DNS up and running in the mean time thru ISA. Now back to the web chaining.

(in reply to jalcala)

Post #: 8

RE: Client needing access to two different proxies - 23.Aug.2005 11:50:00 AM

jalcala

Posts: 32
Joined: 12.Aug.2005
Status: offline

OK jumping back into this, here is what I have done:

Confgiured the ISA server for webchaining and created a URL set to redirect the users requesting the URL to the proper proxy. I have the web chainig rule for this URL configured as:

Action:
Redirecting them to a hosted site
Site: otherproxyserver.otherdomain.org
Port 8080
SSL 8443

Now when I try and access thru my proxy server I get the following error message from the other proxy server:

Error Code: 502 Proxy Error The URL does not use a recognized protocol. Either the protocol is not supported or the request was not typed correctly. Confirm that a valid protocol is in use.
IP
Date
Server
Source

[ August 23, 2005, 11:51 AM: Message edited by: jalcala ]

(in reply to jalcala)

Post #: 9

RE: Client needing access to two different proxies - 23.Aug.2005 1:29:00 PM

jalcala

Posts: 32
Joined: 12.Aug.2005
Status: offline

OK well got it working. Had to change on the Action properties the upstream proxy server. I manually entered the DNS name of the proxy and BADA-BING! It worked. Now clients acc my ISA server for normal Internet usuage and access the other proxy for specific websites.

Thanks all for your help.

(in reply to jalcala)

Post #: 10

RE: Client needing access to two different proxies - 23.Aug.2005 2:59:00 PM