Welcome to ISAserver.org

Complicated IAg setup (D.Shinder plz help)

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 General] >> General >> Complicated IAg setup (D.Shinder plz help)

Page: [1]

Message

<< Older Topic Newer Topic >>

Complicated IAg setup (D.Shinder plz help) - 14.Aug.2008 5:09:28 AM

mado81

Posts: 3
Joined: 8.Aug.2008
Status: offline

I have a complicated case i wish i can find the answer here

some of my client will provide thier epmloyee with a notebokk with a 3g internet connectivity

they will enbale access only to our IAG public IP address

they need to access som einternak esources (this is fine)

the problem is they need thier emplyees to access only one externla web site (internet based web site ) only after connecting to IAG

we don't give VPN access only we need to publish the application
its better ro solve this problem on the IAG level

plz HELPPPPP

Thanks,
Mado

Post #: 1

Featured Links*

RE: Complicated IAg setup (D.Shinder plz help) - 15.Aug.2008 8:57:53 AM

tshinder

Posts: 47663
Joined: 10.Jan.2001
From: Texas
Status: offline

Remember that the IAG isn't a real VPN server, it's an "SSL VPN" server, so the level of network control you have over the SSL VPN clients isn't the same as what you would get with a real remote access VPN server. There's isn't a way to block split tunneling (unless you're using the network connector) and even if you could block split tunneling, there's no way to configure the IAG so that the client can only access a single external Web site.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to mado81)

Post #: 2