Welcome to ISAserver.org

SSL Bridging

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Publishing] >> Web Publishing >> SSL Bridging

Page: [1]

Message

<< Older Topic Newer Topic >>

SSL Bridging - 2.Mar.2007 2:41:32 PM

ofeefee

Posts: 30
Joined: 19.Jan.2007
Status: offline

My problem is when I SSL bridge to a https site that is hosted on a cisco CSM/SSL Accelerator? What I see when I try it is that the site comes up, but instantly goes to done instead of showing me the pages.

Anyone know if there's an issue with SSL bridging and talking through a Cisco CSM/SSL system to backend servers.

Works:
HTTPS -> ISA -> HTTPS internal site (No Cisco, direct HTTPS to the server)
HTTPS -> ISA -> HTTP internal site (No Cisco, direct HTTPS to the server)

Does not work:
HTTPS -> ISA -> HTTPS Cisco SSL IP for the farm

_____________________________

Google is your friend!

Post #: 1

Featured Links*

RE: SSL Bridging - 3.Mar.2007 5:42:16 PM

mylo

Posts: 138
Joined: 26.Mar.2002
Status: offline

What happens when you point directly to the CSM/SSL box over HTTPS.... i.e. between the ISA and CSM.. I've seen CSM/CSS work fine with ISA where it sits in front of ISA ...

Regards,
Mylo

(in reply to ofeefee)

Post #: 2

RE: SSL Bridging - 5.Mar.2007 2:48:41 PM

ofeefee

Posts: 30
Joined: 19.Jan.2007
Status: offline

If I pull up the HTTPS site that's on the CSM it works perfectly fine from the ISA box using IE.

If I'm outside going through SSL bridging to the CSM it fails, it appears the CSM returns 0 data. I'll have to pull a sniffer trace, but from my workstation and from the proxy, if you go direct it works fine.

I tried doing the same Rule, but instead of using an HTTPS server off the CSM, I used another HTTPS inside (my intranet server), and the SSL bridging worked perfectly fine.

(in reply to mylo)

Post #: 3

RE: SSL Bridging - 6.Mar.2007 3:27:28 PM

mylo

Posts: 138
Joined: 26.Mar.2002
Status: offline

Try turning logging on in both ISA and IOS .. check ISA monitoring first ... Are the connections being bridged correctly ? i.e. what is terminating the connection.. by the sound of it the problem is in the rule..

Can you provide information on your publishing rule for ISA (as https alone to the CSM works)

Regards,
Mylo

(in reply to ofeefee)

Post #: 4