Welcome to ISAserver.org

Same site, same URL from both External and Internal Networks. Possible?

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Publishing] >> Web Publishing >> Same site, same URL from both External and Internal Networks. Possible?

Page: [1]

Message

<< Older Topic Newer Topic >>

Same site, same URL from both External and Internal Net... - 22.Sep.2008 9:49:43 AM

MarkyMarkMark

Posts: 5
Joined: 22.Sep.2008
Status: offline

Hi,

We have an ISA2006 box which is successfully publishing several internal sites.

However these sites have different URLs depending on where you are accessing it from (i.e. site1.domain.local (internally) and site1.fqdn.com (externally)).

I've been looking for ages and may be a I've just missed it, but is it possible for the internal network users to access the sites using the external URLs (e.g. site1.fqdn.com) so that I don't have to give everyone different addresses?

Many thanks,
Marky!

Post #: 1

Featured Links*

RE: Same site, same URL from both External and Internal... - 22.Sep.2008 10:41:36 AM

Jason Jones

Posts: 3089
Joined: 30.Jul.2002
From: United Kingdom
Status: offline

Yep!

You will need to configure your ActiveSync web listeners to listen on both internal and external networks. You will then need to define external IP addresses on your external DNS servers and internal IP addresses on you internal DNS servers.

You will need to have something called "split DNS" to provide this functionality.

Cheers

JJ

< Message edited by Jason Jones -- 22.Sep.2008 10:43:05 AM >

_____________________________

Jason Jones | Forefront MVP | Silversands Ltd
My Blog: http://blog.msfirewall.org.uk/

(in reply to MarkyMarkMark)

Post #: 2

RE: Same site, same URL from both External and Internal... - 22.Sep.2008 11:18:49 AM

MarkyMarkMark

Posts: 5
Joined: 22.Sep.2008
Status: offline

Hi,

Thanks for your reply.

I have set the listener to listen on both Ext and Int networks.
I have the public IP configured on the ext DNS for the FQDN.
And I have the private IP configured on the Int DNS for both the FQDN and the Local URL.

I get the following error when I try and browse from my internal network using the FQDN...
****************
Error Code: 502 Proxy Error. The ISA Server denied the specified Uniform Resource Locator (URL). (12202)
****************
Any ideas??

Thanks again,
Marky.

(in reply to Jason Jones)

Post #: 3

RE: Same site, same URL from both External and Internal... - 22.Sep.2008 2:39:06 PM

pwindell

Posts: 1111
Joined: 12.Apr.2004
From: Taylorville, IL
Status: offline

Mark,

It is not only possible,...it is supposed to be done that way...particularly if SSL sites get involved.

If the Private AD and the Public Domain names are spelled the same you just add the A Records to your DNS so that the LAN users can go directly to the Web Server without using the ISA.

If the Private AD and the Public Domain names are not spelled the same you add a new Non-AD Zone to your DNS that matches the Public Name. Then just add the A Records (or CNAMEs) to you new DNS Zone so that the LAN users can go directly to the Web Server without using the ISA. Just remember that once you create the Zone you will have to add all the records required by the Zone because queries for that Zone will not be passed on to any other DNS.

_____________________________

Phillip Windell
www.wandtv.com

(in reply to MarkyMarkMark)

Post #: 4

RE: Same site, same URL from both External and Internal... - 23.Sep.2008 3:22:22 AM

MarkyMarkMark

Posts: 5
Joined: 22.Sep.2008
Status: offline

...Thanks, but that is what I have done (see above)!

The only way I can get to the site using the internal network is to remove my proxy settings from Connections in my Internet Options. Otherwise I get the above error message.

Any ideas??

< Message edited by MarkyMarkMark -- 23.Sep.2008 3:32:52 AM >

(in reply to pwindell)

Post #: 5

RE: Same site, same URL from both External and Internal... - 23.Sep.2008 3:46:45 AM

Jason Jones

Posts: 3089
Joined: 30.Jul.2002
From: United Kingdom
Status: offline

You need to add the URLs to your direct access list.

_____________________________

Jason Jones | Forefront MVP | Silversands Ltd
My Blog: http://blog.msfirewall.org.uk/

(in reply to MarkyMarkMark)

Post #: 6

RE: Same site, same URL from both External and Internal... - 23.Sep.2008 4:04:07 AM

MarkyMarkMark

Posts: 5
Joined: 22.Sep.2008
Status: offline

Thanks JJ,

I've just done what you suggest but I'm still getting the above error :-(

(in reply to Jason Jones)

Post #: 7

RE: Same site, same URL from both External and Internal... - 23.Sep.2008 4:26:45 AM

MarkyMarkMark

Posts: 5
Joined: 22.Sep.2008
Status: offline

Scrub that... it now works!! Yippee!!
I think it must have taken a few minutes to update or something.

Thanks for all your help everyone!!!

(in reply to MarkyMarkMark)

Post #: 8

RE: Same site, same URL from both External and Internal... - 23.Sep.2008 5:54:00 PM