Welcome to ISAserver.org

Whether can WebProxy (ISA Server) be Transparent Proxy?

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2000 Firewall] >> SecureNAT Client >> Whether can WebProxy (ISA Server) be Transparent Proxy?

Page: [1]

Message

<< Older Topic Newer Topic >>

Whether can WebProxy (ISA Server) be Transparent Proxy? - 2.Oct.2002 8:04:00 PM

Dr_Cancel

Posts: 2
Joined: 2.Oct.2002
From: Russia
Status: offline

Hi All!

Whether can WebProxy (ISA Server) be Transparent Proxy?

And how I can restrict access by IP to Internet through WebProxy?
Through WebProxy, but not through rules...

Thanks!

Post #: 1

Featured Links*

RE: Whether can WebProxy (ISA Server) be Transparent Pr... - 3.Oct.2002 5:07:00 PM

tshinder

Posts: 47439
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi DC,

You can make the clients SecureNAT client and then use client access sets for access controls. The HTTP Redirector will forward requests to the Web Proxy service so that the SecureNAT clients can take advantage of the cache.

HTH,
Tom

(in reply to Dr_Cancel)

Post #: 2

RE: Whether can WebProxy (ISA Server) be Transparent Pr... - 4.Oct.2002 10:54:00 AM

Dr_Cancel

Posts: 2
Joined: 2.Oct.2002
From: Russia
Status: offline

I have made so.
I create Site & Content rule, name it "AllowAll".
On page Client Type select Client Set and select "a", "b", "c".

"AllowAll" rule working for users "a", "b", "c".

Then I create Protocol Rule for users "a", "b", "c" with protocol http & https.
All is excellent, all works! All sites & pages are accessible to users by this protocols in internet.

Then I want to create Protocol Rule with ftp prtotocol & I want that to users "a", "b", "c" was accessible only ftp.cdrom.com.
I create Destination Set name it FTP-CDROM.COM and I write in it ftp.cdrom.com.

Then I again create Site & Content rule on page Client Type select Client Set and select "a", "b", "c", on page Destination Sets I select FTP-CDROM.COM.

OK.
I think that all works and users "a", "b", "c" can go only to ftp.cdrom.com by ftp...
But, is not so! And my users "a", "b", "c" can go on any ftp sites because for them works not only FTP-CDROM.COM rule, for them the rule AllowAll also works. [Frown]

And my question:
how for SNAT clients I can allow to go everywhere by http & https protocols, but by ftp protocol they could go only to the certain addresses???

Thanks!

sorry for my english...

(in reply to Dr_Cancel)

Post #: 3

RE: Whether can WebProxy (ISA Server) be Transparent Pr... - 4.Oct.2002 9:21:00 PM