Welcome to ISAserver.org

ISA 2006 Web Proxy Client Issue

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Firewall] >> General >> ISA 2006 Web Proxy Client Issue

Page: [1]

Message

<< Older Topic Newer Topic >>

ISA 2006 Web Proxy Client Issue - 2.Sep.2008 10:45:58 AM

searnhardt

Posts: 1
Joined: 2.Sep.2008
Status: offline

We've recently installed two new ISA 2006 servers to replace our aging 2000 servers. Everything seems to be fine with one exception. We have some internal websites that are not working on our Web Proxy Clients. It would appear that Firewall and SecureNAT clients are fine. At first I thought this was a DNS issue, and then an authentication issue, but it is actually neither of those. The problem explicitly manifests itself when we use the FQDN of internal servers only. Let's assume that we have a web page hosted at SVR1.mydomain.com and that server is LOCAL on my domain. If I simply put in my IE URL: http://SVR1 then everything is fine. However, if I put in http://SVR1.mydomain.com, I get error code 502 (12202) returned to me. In doing some research last night, I looked in the help file of the SDK and read that, paraphrasing, if you put dots into your URL you are telling the ISA server to use the Web Proxy. If you DON'T put dots, you are telling the ISA server the address is local.
I have verified that it isn't DNS or Authentication by going into the properties of the Proxy Settings on IE and adding "SVR1.mydomain.com" into the "Do not use proxy server for addresses beginning with:" section and everything works PERFECTLY. The problem is that we have about 20 of these internal sites and I'd rather not put all 20 of those sites in that exception list.

So, the question is, how do I best get the desired result of having internal sites NOT go through the Web Proxy? The flip side of this is that I COULD put *.mydomain.com in the exclusions field, but we actually have "www.mydomain.com" hosted on the real world, external, website that our users need to get to. Is there a way to force that ONE site TO use the web proxy client?

I'm hoping there is a trick somewhere in the Network Settings to allow me to get my desired results, but I'm not aware of anything. Your help in this matter is greatly appreciated!

Post #: 1

Featured Links*

RE: ISA 2006 Web Proxy Client Issue - 2.Sep.2008 11:43:55 AM

Jason Jones

Posts: 2119
Joined: 30.Jul.2002
From: United Kingdom
Status: online

Do a search on 'direct access' as you need to get ISA web proxy clients bypassing ISA using a feature called direct access.

Cheers

JJ

_____________________________

Jason Jones (MVP)

Silversands Limited http://www.silversands.co.uk
My Blog: http://blog.msfirewall.org.uk/

Get our NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to searnhardt)

Post #: 2