Welcome to ISAserver.org

http access only via web proxy

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Cache] >> Web Proxy client >> http access only via web proxy

Page: [1]

Message

<< Older Topic Newer Topic >>

http access only via web proxy - 28.Apr.2004 1:16:00 PM

flbo

Posts: 2
Joined: 28.Apr.2004
Status: offline

Hi

I have a machine with 2 nic¦s connected to the internet and localnet (as every body else :-)

anyway, I have successfully been able to create access rulez that allow user from localnet to surf the internet via port 80 and 8080 (web proxy).

But what I want ias to disable localnet users the possibility to surf the net without using the web proxy (port 8080)

how can I do this ?

thanks
flemming

Post #: 1

Featured Links*

RE: http access only via web proxy - 29.Apr.2004 1:30:00 AM

tshinder

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Flemming,

You can do this, but you can't require authentication, since SecureNAT clients can't authenticate.

HTH,
Tom

(in reply to flbo)

Post #: 2

RE: http access only via web proxy - 29.Apr.2004 1:17:00 PM

flbo

Posts: 2
Joined: 28.Apr.2004
Status: offline

thanks for the quick reply... I will try to figure it out now.

Only problem is that when I try to remove the rule (localnet -> External (80)) then clients can connect to internet. neither port 80 or 8080 :-(

(in reply to flbo)

Post #: 3

RE: http access only via web proxy - 2.May2004 4:53:00 PM

tshinder

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Flemming,

I'm not sure what the problem is. Are you trying to allow outbound access for hosts that do not authenticate? If so, create a Computer Set or Address range and enable machines access, from Internal to External. Make sure that rule is above any rules that require authentication.

HTH,
Tom

(in reply to flbo)

Post #: 4

RE: http access only via web proxy - 13.May2004 5:38:00 PM

azfar

Posts: 486
Joined: 27.Oct.2002
From: Karachi
Status: offline

I am not sure but i saw in protocol rules that have this kind of condition look at To and From tabs.

(in reply to flbo)

Post #: 5

RE: http access only via web proxy - 14.May2004 2:25:00 AM

tshinder

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline

Hey guys,

I think the issue here is not the "web proxy port" but authentication. Just require authentication for all your rules and no one is going to get outbound access without autenticating.

HTH,
Tom

(in reply to flbo)

Post #: 6