Welcome to ISAserver.org

ISA outbound SSL from SecureNAT Client

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Misc.] >> ISA 2006 Programming >> ISA outbound SSL from SecureNAT Client

Page: [1]

Message

<< Older Topic Newer Topic >>

ISA outbound SSL from SecureNAT Client - 15.Jun.2007 3:54:05 PM

pratikrana

Posts: 5
Joined: 17.Jan.2007
Status: offline

Hi All,

I am trying to connect to an external web server from an internal client whose next-hop is set to the ISA server if the destiantion is the web server (i.e.the client is a SecureNAT client). I am trying to use HTTPS. when I type https:\\webserver\file.htm, I see "SSL continuation data" in reply to SSL client hello. When I inspect the reply packet I see "Bad request error message". Ethereal trace on the ISA server shows that the ISA server is getting SSL client hello but it is replying with this error packet. Also I do not see any communication between ISA server and the web server when all of this was happening.

Does any one have a clue as what is happening? I am using default configurations with ISA server 2006? Is this supposed to work in the first place?

Post #: 1

Featured Links*

RE: ISA outbound SSL from SecureNAT Client - 8.Sep.2007 9:20:46 AM

ianfermo

Posts: 234
Joined: 7.Nov.2004
From: Zamboanga, Philippines
Status: offline

Hi,

Do you have a rule that Allows-Internal-HTTPS-External?

Cheers...

(in reply to pratikrana)

Post #: 2

RE: ISA outbound SSL from SecureNAT Client - 8.Sep.2007 4:22:59 PM

ferrix

Posts: 358
Joined: 16.Mar.2005
Status: offline

It sounds like the isa web proxy is intercepting and attempting to inspect the outbound SNAT HTTPS traffic. Do you have the web proxy filter selected in the HTTPS protocol properties? If so, this is incorrect, and should be removed.

If your intention is actually to inspect outbound HTTPS you need ClearTunnel.

(in reply to ianfermo)

Post #: 3

RE: ISA outbound SSL from SecureNAT Client - 8.Sep.2007 4:41:31 PM