Welcome to ISAserver.org

Web Chaining

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Web Proxy] >> General >> Web Chaining

Page: [1]

Message

<< Older Topic Newer Topic >>

Web Chaining - 2.Sep.2008 2:42:20 AM

varun25

Posts: 54
Joined: 24.Aug.2008
Status: offline

Hi

Is there a document which explains or has steps to configure Web Chaining?

My scanario is below
I have 2 ISA servers, one a downstream ISA server (This is on the internal network), the other is an UPstream ISA server (this is in the DMZ).

I want the users firewall/proxy clients to be looking at the Internal ISA server, and Internal ISA to forward all HTTP/HTTPS requests to Upstream server (the one in DMZ).

I have configured web chaining rule on the Internal ISA server and have specified the forwarding upstream server address.

When i point the client proxy to the internal server address it doesnt work, neither pointing the proxy to the DMZ ISA works.

Am i doing something wrong?

Please assist

Varun

Post #: 1

Featured Links*

RE: Web Chaining - 2.Sep.2008 10:44:59 AM

paulo.oliveira

Posts: 840
Joined: 3.Jan.2008
From: Amazonas, Brazil
Status: online

Hi,

maybe this articles can help you:
http://www.isaserver.org/tutorials/ISA-Server-2006-Installing-Enterprise-Edition-beta-Unihomed-Workgroup-Configuration-Post-Installation-Part3.html
http://www.isaserver.org/tutorials/Web-Proxy-Chaining-Form-Network-Routing.html

and this brand new to understand some concepts about Web Caching:
http://www.isaserver.org/tutorials/Understanding-Web-Caching-Concepts-ISA-Firewall.html

Regards,
Paulo Oliveira.

(in reply to varun25)

Post #: 2

RE: Web Chaining - 2.Sep.2008 7:30:47 PM

varun25

Posts: 54
Joined: 24.Aug.2008
Status: offline

Thanks Paulo

The documents are really helpful and explain things very well. I have configured the web chaining on the downstream server. forwarding all HTTP requests to the upstream server (In DMZ).

should i able to access the internet on the internal ISA server if i change the proxy address to the upstream ISa server?

for some reason i cant ping the ISA servers from each other, is this normal?

Varun

(in reply to paulo.oliveira)

Post #: 3

RE: Web Chaining - 3.Sep.2008 7:47:40 AM

paulo.oliveira

Posts: 840
Joined: 3.Jan.2008
From: Amazonas, Brazil
Status: online

Hi Varun,

quote:

should i able to access the internet on the internal ISA server if i change the proxy address to the upstream ISa server?

Yes, but I�ll not advice you to do that. Because ISA is your firewall, hence you don�t want to make holes on it. So don�t use it as a desktop machine.

quote:

for some reason i cant ping the ISA servers from each other, is this normal?

Yes, this is ISA normal behaviour. To allow ping to ISA server machine, check this:
How to allow Ping From Selected Computers to ISA Server Machine

Regards,
Paulo Oliveira.

(in reply to varun25)

Post #: 4