Welcome to ISAserver.org

Reroute to a local proxy

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Web Proxy] >> General >> Reroute to a local proxy

Page: [1]

Message

<< Older Topic Newer Topic >>

Reroute to a local proxy - 2.Jun.2008 3:06:19 AM

deep3

Posts: 2
Joined: 2.Jun.2008
From: Switzerland
Status: offline

Hi everyone

We use ISA 2006 on Windows 2003 Server and have te following problem:
Normally all users use in IE the proxy settings server.domain.lan:8080 / http://server.domain.lan:8080/array.dll?Get.Routing.Script or has install the isa firewall client. But a special user group, who has access to a special government website, has install a local proxy software on the client. Before we installed the ISA Server, we used an proxy.pac file for this user group (see below)

Our special proxy.pac:
function FindProxyForURL(url, host)
{
if (shExpMatch(url, "https://portal.xxx.123.ch*"))
return "PROXY localhost:8088";

if (isPlainHostName(host) ||
dnsDomainIs(host, ".local.domain.lan") ||
isInNet(host, "10.36.0.0", "255.255.0.0") ||
isInNet(host, "172.16.33.0", "255.255.255.0"))
return "DIRECT";
else
return "PROXY 172.16.1.1:8080";
}

Now my Question:
Is it possible to reroute the client to the local proxy software on the isa server, if the client wants to connect to https://portal.xxx.123.ch* ? We want to remove the special proxy.pac and implement it to the ISA Server.

_____________________________

Microsoft ISA 2006 Standard, Windows 2003 Server SP2

Post #: 1

Featured Links*

RE: Reroute to a local proxy - 4.Jun.2008 6:37:05 AM

HePa

Posts: 135
Joined: 9.May2008
From: Sweden, Gothenburg
Status: offline

The clients are configured as "Webprocy clients" and "Firewall Clients" as I understod? The get proxy settings so that their HTTP, HTTPS and FTP communication is gping through the ISA server? Am I right?

Configure the clients computers without the proxy settings as the other clients have and don't apply he firewall client on them and apply the other Prox settings. Wouldn't that work? You can do a GPO which applyes the Proxy settings on the clients and filter the GPO on a group, which the computers reside in. Maby I missunderstod the scenario but I can't see any problem in the situation.

_____________________________

Henrik Parkkinen

(in reply to deep3)

Post #: 2

RE: Reroute to a local proxy - 4.Jun.2008 9:39:53 AM

deep3

Posts: 2
Joined: 2.Jun.2008
From: Switzerland
Status: offline

Hi Henrik, thanks for reply.

quote:

The clients are configured as "Webprocy clients" and "Firewall Clients" as I understod? The get proxy settings so that their HTTP, HTTPS and FTP communication is gping through the ISA server? Am I right?

Normally all clients are configure as "Webproxy Client" and all Internet traffic is going through the ISA.

quote:

Configure the clients computers without the proxy settings as the other clients have and don't apply he firewall client on them and apply the other Prox settings. Wouldn't that work?

There are some clients (with that special local proxy software) who has the firewall client install because they need acces to ftp-servers. Our ISA need user authentication for internet-access. This local proxy software is only for the access to the government website. This website is not accessible from the internet so there is a second connection through the BEWAN (thats a secured network from the cantonal Administration) and does not going through the ISA.

For clients with that special local proxy software and no firewall client we use now:

function FindProxyForURL(url, host)
{
if (shExpMatch(url, "https://portal.xxx.123.ch*"))
return "PROXY localhost:8088";
else
return "PROXY proxy.domain.local:8080";
}
It seems to work.
But there is still a problem those clients with the firewall client. In this case it doesn't work.

_____________________________

Microsoft ISA 2006 Standard, Windows 2003 Server SP2

(in reply to deep3)

Post #: 3