Welcome to ISAserver.org

cannot access www over site-to-site vpn

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Web Proxy] >> Web Proxy Client >> cannot access www over site-to-site vpn

Page: [1]

Message

<< Older Topic Newer Topic >>

cannot access www over site-to-site vpn - 13.Oct.2006 5:31:34 PM

jimmyk

Posts: 37
Joined: 22.Sep.2006
Status: offline

ISA 2006

Hello
I cannot access a remote web server, from an internal Internet Explorer client, over an ISA 2006 site-to-site vpn.
I get a 500 error on the internal web client.
I CAN ping across the vpn tunnel between the same internal client and the destination web server.

1 .Does an internal web client (client trying to access a www server through the ISA) have its source ip address replaced by the ISA's external ip by default?

2. If so, and how do I disable it?

3. If I disable it, does it remove the www filtering capability of the ISA? I would think so.

4. If the answer to #1 is YES, is this to allow the ISA to use its web filter on any incoming responses?

If the ISA does replace the client's source ip address with its external ip address, I think that this situation may be preventing the web client from accessing the remote www server across the vpn tunnel.
I think this is because the remote end of the vpn tunnel has a firewall that is filtering on the source ip address of the packet. If the firewall sees a packet being sourced from the ISA's external ip address instead of the web client's ip address, it is dropping the packet.

Thanks for any help on any of this comment / question.\

Cliff