Welcome to ISAserver.org

How to allow IP Adresses in URL

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> Access Policies >> How to allow IP Adresses in URL

Page: [1]

Message

<< Older Topic Newer Topic >>

How to allow IP Adresses in URL - 9.Feb.2004 12:36:00 PM

GMSonic

Posts: 9
Joined: 9.Feb.2004
Status: offline

Hy, is there a way to allow IP Adresses in the Browser URL ? I want access a device in our lan, witch have a web gui. When i connect via dns name, everything works fine, but when i enter the ip adress of the device, i receive an error:

HTTP 502 Proxy Error - The ISA Server denies the specified Uniform Resource Locator (URL). (12202)
Internet Security and Acceleration Server

Any ideas ?? Thanks for your answers.
GM

Post #: 1

Featured Links*

RE: How to allow IP Adresses in URL - 9.Feb.2004 12:54:00 PM

Guest

In your Web browser,
add this IP adress in exeptions list

(in reply to GMSonic)

Post #: 2

RE: How to allow IP Adresses in URL - 9.Feb.2004 1:16:00 PM

GMSonic

Posts: 9
Joined: 9.Feb.2004
Status: offline

Hy Dmitry,
i know this "workaround", but with our isa2000 it works without to add this ip's in the browser. Is this a filter like urlscan ??

(in reply to GMSonic)

Post #: 3

RE: How to allow IP Adresses in URL - 9.Feb.2004 3:24:00 PM

tshinder

Posts: 47439
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi GM,

What rule is blocking the connection? With an "all open" HTTP rule, I am able to connect using IP addressess without problems.

Thanks!
Tom

(in reply to GMSonic)

Post #: 4

RE: How to allow IP Adresses in URL - 9.Feb.2004 4:41:00 PM

GMSonic

Posts: 9
Joined: 9.Feb.2004
Status: offline

Hi Tom,
thanks for your message. The solution was a new Access Rule -> Allow All Protocols form Internal to Internal for All Users. Now everything work great. Can you tell me, must i generate also a new Network Rule (Route from Internal Network to Internal Network) ??

Best Regards GM

(in reply to GMSonic)

Post #: 5

RE: How to allow IP Adresses in URL - 9.Feb.2004 7:29:00 PM

penrose.l@2college.nl

Posts: 474
Joined: 29.Jan.2004
From: Netherlands
Status: offline

hey sonic ,

That's actually a very good question and I had to test it to figure it out.
In ISA server 2000 , for a ping to succeed from internal to external , you would need 2 rules :
Allow ping from internal to external
AND
Allow ping response from external to internal

Apparently , I think due to dynamic ports , in ISA 2004 you only need 1 rule :
Allow ping from internal to external
( and it will automatically allow the response back )

Very strange to get used to but still quite handy.

LexP.

(in reply to GMSonic)

Post #: 6

RE: How to allow IP Adresses in URL - 9.Feb.2004 7:45:00 PM

tshinder

Posts: 47439
Joined: 10.Jan.2001
From: Texas
Status: offline

quote:
Originally posted by GMSonic:
Hi Tom,
thanks for your message. The solution was a new Access Rule -> Allow All Protocols form Internal to Internal for All Users. Now everything work great. Can you tell me, must i generate also a new Network Rule (Route from Internal Network to Internal Network) ??

Best Regards GM

Hi GM,

Yes, if you're going from internal to internal, then you need to allow that connection. However, you should configure the browser to bypass the firewall for internal connection using a split DNS and Direct Access.

Good to hear you got it working and thanks for the follow up!
Tom

(in reply to GMSonic)

Post #: 7