Welcome to ISAserver.org

OWA publishing + unihomed dmz isa

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Web Proxy] >> Unihomed >> OWA publishing + unihomed dmz isa

Page: [1]

Message

<< Older Topic Newer Topic >>

OWA publishing + unihomed dmz isa - 28.Oct.2006 11:24:15 AM

pgisa

Posts: 3
Joined: 26.Oct.2006
Status: offline

ALL,

We have been told by our security team that we cannot have a server in the dmz where a interface is connected to the internal LAN. I have been tasked with publishing OWA 2003 uisng ISA 2006 with the isa server being in the dmz
I know it is not good to use ISA in a unihomed scenario for this but i really dont have a choice. I have configured the server in the dmz with a single nic template and created a exchange publishing rule to listen for http://owa.mycompany.com and told it to forward to our internal FE server. I have exported the certificate from the FE server and installed it on the ISA server. The isa server is in a workgroup.
The FE server is configured with basic authentication with domain \
The ISA has a hosts file with http://owa.mycompany.com pointing to the nat'd ip of the FE server.
Problem:
From the outside i get a isa 2006 login page but i cannot login using my credentials?
How should i configure authentication on the isa box?
I have read the articles on doing this with isa 2004 but i havent found any docs for 2006. The one thing i am not sure about is the ssl options when you create the exchange publish rule where you can choose ssl or non ssl to the internal FE server?
The NAT is ok from the PIX point of view as i have got our network guys to check this and have seen the traffic being nat'd.

Am i close to this working and it just being a authentication mismatch?

Regards

PG