Welcome to ISAserver.org

Web chaining and NAT

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 General] >> General >> Web chaining and NAT

Page: [1]

Message

<< Older Topic Newer Topic >>

Web chaining and NAT - 8.May2008 12:27:40 PM

DAT800

Posts: 1
Joined: 8.May2008
Status: offline

Hi,

First post here and I hope someone can be of help.

Is it at all possible use web chaining to an upstream proxy and disable NAT?

By this I want the upstream proxy to see the local IP's of the workstations and keep the ISA in single NIC mode to be used for filtering\caching.

Many Thanks

DT

Post #: 1

Featured Links*

RE: Web chaining and NAT - 12.May2008 12:46:14 PM

tshinder

Posts: 47669
Joined: 10.Jan.2001
From: Texas
Status: online

It's not really NAT, it's Web Proxy. That's why the source IP address is the downstream ISA Firewall, because the downstream ISA Firewall is making the request on behalf of the Web Proxy client behind it. NAT just NATs the request, the ISA Firewall doesn't make the request on behalf of the client when it just NATs.

So, no -- you can't preserve the source IP address of the original client in a Web Proxy chaining scenario, because that's the nature of forward proxying.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to DAT800)

Post #: 2