Welcome to ISAserver.org

Port Address Translation Issue?

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 General ] >> Web Publishing >> Port Address Translation Issue?

Page: [1]

Message

<< Older Topic Newer Topic >>

Port Address Translation Issue? - 26.Mar.2008 2:46:54 PM

maddog

Posts: 1
Joined: 26.Mar.2008
Status: offline

We have what I think is fairly common web hosting scenario: Internet ---> Router ---> FW -----> ISA -----> Web Server. We are running ISA 2004 Enterprise and there are two servers in the array and they are connected to our DMZ Domain. Both servers have two interfaces--Internal & External. On the External interface there is a common VIP. For example they both share: 10.0.0.5. We make use of high ports so we can use the same VIP for many sites. So for example we are running an SSL site on 10.0.0.5:8081 (we checked and this port is free). The FW is listening on our external IP range on port 443. It knows to take inbound requests and NAT them to 10.0.0.5 and also PAT them to port 8081 (the web listener on the ISA). The ISA then in turn will take this request and send the request to the internal web server. We did this with the wizard for "publish a secure website". We are also utilizing basic authentication on the web listener (of our DMZ AD). For example users would hit https://mywebsite.com.

Now the issue: when connecting to the site users can authenticate off the domain and the page begins to load but after a few seconds it stops loading and the URL in the browser is switched from https://mywebsite.com to https://mywebsite.com:8081. If you strip the 8081 off the end of the request and hit enter the site works fine. How do we get the 8081 to not show up? I can provide additional details if necessary. Thank you for your help!