Welcome to ISAserver.org

SSL & SharePoint - Will this scenario work?

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> General >> SSL & SharePoint - Will this scenario work?

Page: [1]

Message

<< Older Topic Newer Topic >>

SSL & SharePoint - Will this scenario work? - 23.Jul.2004 4:39:00 AM

heydonp

Posts: 2
Joined: 23.Jul.2004
From: Brisbane, Australia
Status: offline

Hello,

At the moment, we are using SharePoint for various projects and have a number of subdomains that we need to manage. For each subdomain we use SSL and hence have a public IP for each instance.

As we have a limited number of public IPs in our company, I'm investigating the use of ISA to act as a single entry point, and then depending on which subdomain the client is requesting, redirect/tunnell to the appropriate virtual web server (this redirection doesn't need to be encrypted as we're within our DMZ at this point)

The intention is to consolidate the use of public IP's down to 1 if possible. We currently have a wildcard SSL certificate for our sites.

From what I've read, I understand that this setup will work with ISA. I'm hoping to get confirmation that this scenario is possible with ISA, before I start devoting too much more time & energy and finding out that this won't work at all.

Thanks,
Peter

Post #: 1

Featured Links*

RE: SSL & SharePoint - Will this scenario work? - 24.Jul.2004 7:38:00 PM

tshinder

Posts: 47659
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Peter,

It will definitely work. However, you should *always* perform SSL to SSL bridging. The remote user has an implicit agreement that there is a secure connection from end to end, and that implicit agreement is broken if the ISA firewall performs SSL to HTTP bridging. It doesn't matter how secure you think the DMZ is, if the information moves in the clear, someone can get to it pretty easily.

HTH,
Tom

(in reply to heydonp)

Post #: 2

RE: SSL & SharePoint - Will this scenario work? - 25.Jul.2004 11:26:00 PM