Welcome to ISAserver.org

Error when web publishing (bridging) HTTP -> HTTPS

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 General ] >> Web Publishing >> Error when web publishing (bridging) HTTP -> HTTPS

Page: [1]

Message

<< Older Topic Newer Topic >>

Error when web publishing (bridging) HTTP -> HTTPS - 19.Jan.2005 4:10:00 PM

hennish

Posts: 26
Joined: 1.Dec.2004
Status: offline

Hi. I'm trying to publish an internal Citrix Web Interface and Secure Gateway (CSG) using ISA 2004 to outside users.

The CSG only supports SSL (I think), and ISA is currently listening for HTTP at TCP port 5081 behind a PremierAcess token security solution.

So this is basically a Client HTTPS -> PremierAccess proxy HTTP -> ISA 2004 HTTPS -> CSG bridging scenario.

If you're confused right now, just skip the PremierAccess part and imagine we just have to make the HTTP -> ISA 2004 -> HTTPS -> CSG bridging.

The problem is that when I request http://outside.company.com/citrix, ISA internally tries to fetch the request from http://csg.company.com:443/citrix.

Why can't it connect to the internal server using SSL at the address https://csg.company.com/citrix? I know the bridging tab says "redirect to port 443", but I want it to use https, not http.

The ISA log says "Failed connection attempt", and the client browser gets an error message "Error Code: 500 Internal Server Error. The context has expired and can no longer be used. (-2146893033)"

Anyone followed me this far? "[Wink]"

Thanks in advance! /Anders

Post #: 1

Featured Links*

RE: Error when web publishing (bridging) HTTP -> HTTPS - 19.Jan.2005 5:01:00 PM

hennish

Posts: 26
Joined: 1.Dec.2004
Status: offline

Never mind. The weird error message apparently came from the CSG server, and only appeared when I tried a non-working URL. I corrected the URL, and voila!

However, if I try that URL directly to the server, it returns a 404. So the weird error must have been produced by ISA.

Anyway, everything works fine now.

/Anders

(in reply to hennish)

Post #: 2

RE: Error when web publishing (bridging) HTTP -> HTTPS - 28.Dec.2007 3:25:07 PM

xAyiDe

Posts: 6
Joined: 27.Sep.2007
Status: offline

Hello a later question related to this post!

I have ONE external IP and want to use both Exchange 2007 OWA (IIS x64) and Citrix Secure Gateway with that. I also have one ISA 2006 Enterprise.

Can I have both OWA and CSG on port 443 if configured to run via ISA 2006?
If so how would I publish the sites. On all other forums on internet I have came to conclusion this is impossible but this post gave me new hope!

There is no option to use any other port than 443 since that would conflict with many corporate firewall rules if OWA or CSG is not running on 443 which is standard for SSL.

My netwrok looks similar to:

Internet -> OpenBSD(PF/NAT) -> [Servers]:
                                                 Server1: ISA 2006
                                                 Server2: Exchange 2007 with IIS on x64 (OWA)
                                                 Server3: CSG with Citrix Webinterface on IIS x86
                                                 ServerX: ....Additional servers not of importance here.

Can I do some hostbased lookup on incoming SSL to port 443 to make use of ISA as SSL gateway/redirecter and direct to either CSG or OWA based on hostheadername?

Please anyone explain if this is possible I really do need some help to get me going.

< Message edited by xAyiDe -- 28.Dec.2007 3:31:56 PM >

(in reply to hennish)

Post #: 3