Welcome to ISAserver.org

Web Proxy Failover

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Firewall] >> Network Infrastructure >> Web Proxy Failover

Page: [1]

Message

<< Older Topic Newer Topic >>

Web Proxy Failover - 19.Jun.2008 8:37:01 PM

adrianbest

Posts: 5
Joined: 3.Oct.2005
Status: offline

We have a WAN with two ISP's one at each site. In front to provide security and access to the Internet we have deployed ISA 2006 servers. Is it possible to provide failover if we loss an ISA server and or Internet at a site. We have enough bandwidth to route over the WAN if needed...

Post #: 1

Featured Links*

RE: Web Proxy Failover - 20.Jun.2008 8:50:58 AM

adrianbest

Posts: 5
Joined: 3.Oct.2005
Status: offline

I have done some more investigation and wondered whether anyone had implemented the following scenario.
Using connectivity verifier on the ISA to run a script which would change a wpad file on an IIS web server. The ttl would be set to a 1 minute. This would allow clients to be pointed to difference ISA servers if there is a failure of upstream connectivity to the internet. If the ISA server fails its self then an alternative destination could be use anyway.. Any thoughts on this on be great fully excepted.

(in reply to adrianbest)

Post #: 2

RE: Web Proxy Failover - 20.Jun.2008 9:44:37 AM

Jason Jones

Posts: 1796
Joined: 30.Jul.2002
From: United Kingdom
Status: offline

ISA has a built-in option under the Web Browser tab of the Internal network object whcih allows you to define a single backup ISA Server as a "backup route"

Would this help?

_____________________________

Jason Jones
Silversands Ltd
http://www.silversands.co.uk
View My Blog: http://blog.msfirewall.org.uk/

Get Our NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to adrianbest)

Post #: 3

RE: Web Proxy Failover - 20.Jun.2008 10:46:47 AM

adrianbest

Posts: 5
Joined: 3.Oct.2005
Status: offline

Hi,
Does using "backup route" protect against up stream failure of an ISP.

(in reply to adrianbest)

Post #: 4

RE: Web Proxy Failover - 20.Jun.2008 12:37:49 PM

elmajdal

Posts: 4959
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline

Hi,

I use Cisco Router 1843 that supports multiple WAN Ports ( ISPs) in front of ISA Servers.

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to adrianbest)

Post #: 5

RE: Web Proxy Failover - 20.Jun.2008 12:49:59 PM

Jason Jones

Posts: 1796
Joined: 30.Jul.2002
From: United Kingdom
Status: offline

quote:

ORIGINAL: adrianbest

Hi,
Does using "backup route" protect against up stream failure of an ISP.

Nope, just part of the solution

You need to protect against ISA failure and ISP failure...Tareq sounds like a man with experience of the ISP bit

_____________________________

Jason Jones
Silversands Ltd
http://www.silversands.co.uk
View My Blog: http://blog.msfirewall.org.uk/

Get Our NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to adrianbest)

Post #: 6