Welcome to ISAserver.org

Web Proxy Filtering and SecureNAT ISA 2006

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 General] >> General >> Web Proxy Filtering and SecureNAT ISA 2006

Page: [1]

Message

<< Older Topic Newer Topic >>

Web Proxy Filtering and SecureNAT ISA 2006 - 16.May2007 5:40:26 PM

Yorgy

Posts: 158
Joined: 20.Sep.2006
Status: offline

Hello,

We have ISA 2006 setup as a proxy server with Windows 2003 Server Enterprise SP1.

When clients access websites, I have noticed in the sessions of monitoring activity that two sessions are active for each client accessing websites.

Is there any reason that there should be two sessions per client instead of one (i.e Web Proxy and SecureNAT)?

Do both need to be active or do I need to consider a setting someplace in ISA 2006?

Can someone please help?

Thank you

_____________________________

Life is a zoo in a jungle!

Post #: 1

Featured Links*

RE: Web Proxy Filtering and SecureNAT ISA 2006 - 20.May2007 10:48:56 AM

tshinder

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline

What's not working?

Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to Yorgy)

Post #: 2

RE: Web Proxy Filtering and SecureNAT ISA 2006 - 20.May2007 6:28:19 PM

Yorgy

Posts: 158
Joined: 20.Sep.2006
Status: offline

Hello Tom,

Its working fine.

But here is what I diagnosed:

When opening a browser I.E we have all clients going directly to our intranet site which bypasses proxy server i.e ISA 2006, with this in mind it automatically creates a SecureNAT connection through ISA 2006.

Then when opening another browser and entering a website for example google.com it starts another session with the same IP address using Web Proxy.

I believe I understand the difference; but what I can't understand is why it's still logging information in my proxy server when I have it set to bypass it in my browser for all clients...?

_____________________________

Life is a zoo in a jungle!

(in reply to Yorgy)

Post #: 3

RE: Web Proxy Filtering and SecureNAT ISA 2006 - 22.May2007 8:27:31 AM

tshinder

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Yorgy,

OK, I think I get it :)

You need to configure the browsers to use the autoconfiguration script in order to enforce Direct Access to internal resources. From time to time, you will see them establish SecureNAT connections in order to download the autoconfigurations script.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to Yorgy)

Post #: 4