The ISA reverse proxy server sits in the DMZ and proxies requests to an IIS/OWA box in the internal network. The DMZ uses private address space and the internal network uses private address space. A Check Point firewall performs Static NAT for queries coming in from the Internet.

The ISA proxy server has one interface with 2 IP address bound to it. One is used by an IIS web server listening on port 81 and the other is used by ISA server listening on port 80.

The reverse proxy works perfectly when i try it from the Firewall using the private address... but fails from externally and the firewall using the Real/Routable address. I get a "403 Forbidden message" from the ISA server. I don't believe this is a firewall issue.

Does anyone have any ideas? Is it a LAT issue? My LAT only has the addresses of the ISA machine and the Internal host i am accessing in it.

This configuration was working perfectly in the lab until it was deployed. Now i can get it to work again!

Any help appreciated.

Jason

403 Forbidden - The server denies the specified Uniform Resource Locator (URL). Contact the server administrator. (12202)
Internet Security and Acceleration Server