Welcome to ISAserver.org

ISA2004-SP3, Compression Filter & Jumpbox-Bugzilla

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 General ] >> General >> ISA2004-SP3, Compression Filter & Jumpbox-Bugzilla

Page: [1]

Message

<< Older Topic Newer Topic >>

ISA2004-SP3, Compression Filter & Jumpbox-Bugzilla - 12.Aug.2008 9:35:58 PM

Dave Parker

Posts: 4
Joined: 25.Jul.2005
From: Auckland NZ
Status: offline

Greetings Folks,

I have an odd situation that I have solved, but I am not sure that I am happy with the solution.

I have a web listener bound to a port, that passes traffic from demo.domain.com to an internal web site (a vm jumpbox called bugilla). As a stock ISA2004 with SP3 installed, the compression filter is on, Itunes.com works, and people can access the demo.domain.com ONCE. Any further request with 15 minutes presents a blank page, beyond that, a web page is served, but only once.

I had struggled with, is this an IE6, IE7 or Firefox issue, but result was the same regardless of the order in testing.

In a fit of rage (well... ya know, 4 hours and 7 coffees later) I disabled the Compression Filter (Under Configuration / Add-Ins / Web Filters) and hey preseto, the demo.domain.com served up pages galore, on any browser, and mutliple tabs..

Problem sorted I thought... nahh.. cant be that simple.

2-3 days later, the GM asked if I had blocked Itunes out, in which I hadnt, long story short, enable Compression, Itunes works, bugzilla(demo.domain.com) doesnt. Disable Compression, bugzilla works, itunes doesnt.

As a work around, on the "www traffic out" rule, under protocols, I have edited the http & https rules under parameters, then "application filters", i have UNCHECKED "web proxy filter"

I now have a working solution that allows the demo.domain.com to work from the outside world in with the compression filter disabled, and allows staff/developers to access sites like Itunes.com or codeplex.com to work also.

Is there a better solution as this kinda feels hacky and im not sure if have the "web proxy filter" off work outbound web traffic is a great idea or not.

Comments please? :o)

Regards
Dave