Welcome to ISAserver.org

Https Server publishing CSG

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Publishing] >> Server Publishing >> Https Server publishing CSG

Page: [1]

Message

<< Older Topic Newer Topic >>

Https Server publishing CSG - 26.Feb.2008 3:25:47 PM

nschlabitz

Posts: 1
Joined: 26.Feb.2008
Status: offline

I have the following situation
I have a Citrix Secure gateway (CSG) sitting in my internal network.
The CSG is configured correctly and is listening on port 443

I have an ISA 2006 server with 2 interfaces. 1 on the internal network on 1 on the Perimiter network. I have an external IP NATed through to the the DMZ ip address of the ISA server for access to the CSG.

I have created a server publishing rule to publish https server through to the CSG
Listening on the external interface of the ISA server and pointing to the CSG IP address on the internal network.

However when I try to connect to the CSG from the internet ISA seems to ignore my Server publishing rule and denies the connection with the default rule.

Any ideas on why this might be. There does not seem to be any reason for the problem.

Post #: 1

Featured Links*

RE: Https Server publishing CSG - 27.Mar.2008 3:43:10 AM

aavdberg

Posts: 32
Joined: 30.Jul.2004
From: The Netherlands
Status: offline

Did you solve the problem already.

_____________________________

Greeting from
Andr� van den Berg.

(in reply to nschlabitz)

Post #: 2

RE: Https Server publishing CSG - 27.Mar.2008 5:19:25 AM

Jason Jones

Posts: 2154
Joined: 30.Jul.2002
From: United Kingdom
Status: offline

What default gateway does the CSG box use? What network relationship do you have in ISA between Internal and External?

Try enabling the "requests appear to come from ISA Server" option in the server publishing rule.

Cheers

JJ

_____________________________

Jason Jones (MVP)

Silversands Limited http://www.silversands.co.uk
My Blog: http://blog.msfirewall.org.uk/

Get our NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to aavdberg)

Post #: 3