Welcome to ISAserver.org

ISA redirect proxy

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Firewall] >> General >> ISA redirect proxy

Page: [1]

Message

<< Older Topic Newer Topic >>

ISA redirect proxy - 1.Jul.2008 4:35:33 AM

satheesh

Posts: 7
Joined: 11.Dec.2006
Status: offline

I have a query. In my organization users are using internet browsing service through ISA2006 proxy server. As usual this proxy is connected to DMZ of the firewall and using a dedicated internet line.
The query is: - Users wanted to access a particular website e.g.: www.yahoo.com and we would like to use a different line only for this website access. I need something like what ever the request coming on the common proxy for this particular site has to be gone through different firewall/internet line.
How can I achieve this? Appreciate your advice.
Thanks in advance..
Satheesh S Kumar

Post #: 1

Featured Links*

RE: ISA redirect proxy - 1.Jul.2008 7:54:08 AM

tshinder

Posts: 47010
Joined: 10.Jan.2001
From: Texas
Status: offline

So, for requests for www.yahoo.com, you do not want them to go through the firewall?

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to satheesh)

Post #: 2

RE: ISA redirect proxy - 1.Jul.2008 8:07:55 AM

satheesh

Posts: 7
Joined: 11.Dec.2006
Status: offline

Appreciate the prompt response.

The website is not yahoo, it is www.hiringsolutions.com and our requirement is that when ever any user tries to access this website, they should be redirected to a seperate line(different firewall will be alloted for this line).

Thanks,
Satheesh

(in reply to tshinder)

Post #: 3

RE: ISA redirect proxy - 1.Jul.2008 4:53:28 PM

paulo.oliveira

Posts: 609
Joined: 3.Jan.2008
From: Amazonas, Brazil
Status: offline

Hi,

so, requests will not pass through ISA at all? You need to create a static route in the equipament before reach ISA for the particular network of this website.

Some like:
route add -p Destination_Net mask Network_Mask IP_of_Different_firewall

Regards,
Paulo Oliveira.

(in reply to satheesh)

Post #: 4

RE: ISA redirect proxy - 2.Jul.2008 12:23:47 AM

satheesh

Posts: 7
Joined: 11.Dec.2006
Status: offline

Yes Paulo, I dont want to pass this request through this proxy at all.
You mean to say add a static route as adviced by you on the ISA server with a higher metric??
Or if I have another proxy, shall I create a web chaining rule to redirect this request to the second proxy?

Thanks,
Satheesh

(in reply to paulo.oliveira)

Post #: 5

RE: ISA redirect proxy - 2.Jul.2008 8:00:35 AM

paulo.oliveira

Posts: 609
Joined: 3.Jan.2008
From: Amazonas, Brazil
Status: offline

Hi,

no, you should not create this route on ISA server. Cause this way the traffic will pass through ISA and that�s not what you want.
What I mean is if you have a manager switch between ISA and the client machine, you must add the route in there, otherwise, you must add the route on the clients machines itself.

Regards,
Paulo Oliveira.

(in reply to satheesh)

Post #: 6

RE: ISA redirect proxy - 2.Jul.2008 9:21:02 AM

tshinder

Posts: 47010
Joined: 10.Jan.2001
From: Texas
Status: offline

OK, so the destination must not pass through the firewall. In that case, you might configure your LAN routers to redirect connections to that URL so that they aren't forwarded through the firewall. The firewall itself won't be able to do that for you.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to paulo.oliveira)

Post #: 7