Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

How to make web Proxy client

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2004 Cache] >> Web Proxy client >> How to make web Proxy client Page: [1]
Login
Message << Older Topic   Newer Topic >>
How to make web Proxy client - 24.Feb.2008 2:00:16 AM   
mypass604

 

Posts: 40
Joined: 25.Jan.2008
Status: offline
hi
            I need complete guidance that how can i make "Web Proxy clients" iam using windows xp

thanks in advance
Post #: 1
RE: How to make web Proxy client - 24.Feb.2008 2:57:53 AM   
elmajdal

 

Posts: 4959
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline
Hi,

Start with this article : http://www.isaserver.org/tutorials/Configuring-WPAD-Support-ISA-Firewall-Web-Proxy-Firewall-Clients.html

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to mypass604)
Post #: 2
RE: How to make web Proxy client - 24.Feb.2008 6:08:40 AM   
mypass604

 

Posts: 40
Joined: 25.Jan.2008
Status: offline
thanks for the URL. I want to  configure WEB Proxy and Firewall in my client  windows xp machine.For testing purpose i install ISA Server 2004 and one client machine.

I have successfully test Scure NAT in my lab.Now i want to learn how to configure Web proxy and ISA firewall in my client machine.

The above website is complecated to me to understand because DNS ,and WAN IP all are already configured in my DSL routrer. I just gave LAN IP (Class C Scheme)

Thnaks in advance.

(in reply to elmajdal)
Post #: 3
RE: How to make web Proxy client - 24.Feb.2008 8:49:19 AM   
elmajdal

 

Posts: 4959
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline
quote:

The above website is complecated to me to understand because DNS ,and WAN IP all are already configured in my DSL routrer. I just gave LAN IP (Class C Scheme)


mm i smell something wrong here !!

how many NIC there is on your ISA Server and how did you set them ?

IP/DG/DNS ..... ?

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to mypass604)
Post #: 4
RE: How to make web Proxy client - 24.Feb.2008 12:00:33 PM   
mypass604

 

Posts: 40
Joined: 25.Jan.2008
Status: offline
Well i have two NIC cards.

WAN
LAN

In wan i gave manual IP address and DNS also

in ISA LAN i give

IP:  192.168.1.55
Subnet: 255.255.255.0
Default Gateway:192.168.5.233

DNS:           135.12.40.5
Alternate:      135.13.40.6

Client IP

10.0.0.2
255.255.255.0
10.0.0.1

DNS:         135.12.40.5
Alternate:   135.13.40.6

With SecureNAT  it works fine now i want to configure

Web Proxy Client
Fire Wall Client

thanks

(in reply to elmajdal)
Post #: 5
RE: How to make web Proxy client - 25.Feb.2008 1:44:16 AM   
mypass604

 

Posts: 40
Joined: 25.Jan.2008
Status: offline
hi
   if i use the ISA LAN IP i.e(10.0.0.1) in IE----->connections----->Lan Settings
and under "Proxy Server"  i may give the IP with port 8080 then i think it will work?


(in reply to mypass604)
Post #: 6
RE: How to make web Proxy client - 25.Feb.2008 4:07:22 AM   
elmajdal

 

Posts: 4959
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline
quote:


Well i have two NIC cards.

WAN
LAN

In wan i gave manual IP address and DNS also

in ISA LAN i give

IP:  192.168.1.55
Subnet: 255.255.255.0
Default Gateway:192.168.5.233

DNS:           135.12.40.5
Alternate:      135.13.40.6


Wrong, on the External NIC, never put any DNS Entry.
more info here : http://www.isaserver.org/tutorials/Configuring_ISA_Server_Interface_Settings.html


Seems like you dont have an Internal DNS !!! is that why u r putting your ISP DNS on your CLient NIC ??


now for the web proxy clients, in its simplest forms, you have to enable web proxy inside the Internal Network LAN Properties, on ISA Server.

and in the CLient IE > Tools > Internet Options > Connection > LAN  > Proxy Settings and insert your ISA Server Internal IP and proxy port .

HTH,
Tarek

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to mypass604)
Post #: 7
RE: How to make web Proxy client - 25.Feb.2008 10:06:18 AM   
mypass604

 

Posts: 40
Joined: 25.Jan.2008
Status: offline
thanks for your help.I want to attach my ISA settings,LAN  settings and proxy settings  pictures.when i click on Add Image it switch to URL . How can i upload it to show you by snaps .It will be easy for you to see where iam doing mistake.

thanks.

(in reply to elmajdal)
Post #: 8
RE: How to make web Proxy client - 25.Feb.2008 12:20:48 PM   
elmajdal

 

Posts: 4959
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline
u need to host you image somewhere, try google and write image upload, you find plenty of free image hosting sites.

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to mypass604)
Post #: 9
RE: How to make web Proxy client - 29.Feb.2008 10:17:32 AM   
mypass604

 

Posts: 40
Joined: 25.Jan.2008
Status: offline
Well i did the solution of my problem. I add the client  computer (LAN IP Address)  in ISA Firewall policy then give the same address in IE Proxy settings.

My browsing is now working on my client computer as well as  yahoo messenger also.

Now please guide me that actually what is web  proxy client? it is taking all the web pages the ISA Server .The SecureNat Client was also taking from ISA Server.Only difference i feel in Secure NAT i gave DNS Address also but in web proxy client i deos't give in its LAN Address. what you say about it.


Thnaks.

(in reply to elmajdal)
Post #: 10
RE: How to make web Proxy client - 29.Feb.2008 5:31:09 PM   
elmajdal

 

Posts: 4959
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline
Hi,

read this :

quote:


  • The SecureNET (SecureNAT) client A SecureNET client is a machine configured with a default gateway address that allows Internet bound requests to pass through the ISA Firewall. If the SecureNET client is located on the same subnet of the ISA Firewall, then the default gateway address will be IP address of the ISA Firewall’s interface on the same network ID as the client. If the clients are on a remote subnet from the ISA Firewall, then the IP address will be a router interface address that will use route outbound requests through the ISA Firewall. While the “official” name in the ISA Firewall documentation is SecureNAT client, it is more accurately referred to as a SecureNET client because the Network Rule defining the connection between a source and destination network does not have to be a NAT relationship, it could be a Route relationship.
  • The Firewall Client The Firewall client is a piece of software that must be installed on the client operating systems (the Firewall client should not be installed on server operating systems and never on the ISA Firewall itself). The Firewall client is a generic Winsock proxy client that intercepts Winsock application network calls and forwards them (remotes them) directly to the ISA Firewall. This enables the Firewall client to be transparent to the network routing infrastructure and does not depend on default gateway or route of last resort configuration on network routers. The only network infrastructure requirement is that the clients have a route to the IP address of the ISA Firewall closest to the client. The Firewall client also enables user authentication for access control and supports secondary connections for complex protocols when there is no Application Filter to provide that support. In contrast, SecureNET clients must have an Application Filter in place to support complex protocols that may require multiple primary and secondary connections.
  • The Web Proxy client The Web proxy client is a machine that has its browser configured to use the ISA Firewall as its Web proxy device. Browser configuration can be done manually, or can be automated using the WPAD protocol and WPAD entries in DHCP and/or DNS. The Web proxy client configuration supports only HTTP, HTTPS, and HTTP tunneled FTP requests and does not support FTP upload, only FTP download. Web proxy clients can authenticate with the ISA Firewall, in contrast to SecureNET clients, which cannot authenticate with the ISA Firewall. 

  • source : http://www.isaserver.org/tutorials/Definitive-Guide-ISA-Firewall-Outbound-DNS-Scenarios-Part2.html


    _____________________________

    Tarek Majdalani

    MS Forefront Edge Security MVP
    Website : http://www.elmajdal.net/ISAServer
    New Section : http://www.elmajdal.net/Win2k8

    (in reply to mypass604)
    Post #: 11
    RE: How to make web Proxy client - 1.Mar.2008 11:16:01 PM   
    mypass604

     

    Posts: 40
    Joined: 25.Jan.2008
    Status: offline
    Thanks "elmajdal"  for the help . well there is a question that as i mentioned i added my client computer in ISA Server 2004 then my proxy client worked by adding ISA LAN IP Adress i.e 10.0.0.1 in the internet explorer. (

    2-Now if there are 100 computers then should i add all 100 computers in ISA Firewall policy (In case of workgroup)

    3- if the computers are member of domain than what is the method to use Web Proxy Client? (In case of member of Domain).


    thanks again
    mypass604

    (in reply to elmajdal)
    Post #: 12

    Page:   [1] << Older Topic    Newer Topic >>
    All Forums >> [ISA Server 2004 Cache] >> Web Proxy client >> How to make web Proxy client Page: [1]
    Jump to:

    New Messages No New Messages
    Hot Topic w/ New Messages Hot Topic w/o New Messages
    Locked w/ New Messages Locked w/o New Messages
     Post New Thread
     Reply to Message
     Post New Poll
     Submit Vote
     Delete My Own Post
     Delete My Own Thread
     Rate Posts