• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Forwarding HTTP requests

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA 2006 Web Proxy] >> Unihomed >> Forwarding HTTP requests Page: [1]
Login
Message << Older Topic   Newer Topic >>
Forwarding HTTP requests - 11.Oct.2007 11:03:09 PM   
RobertL

 

Posts: 5
Joined: 11.Oct.2007
Status: offline
Hello,

I am just setting up ISA 2006. It’s on a host sitting behind a (hardware) firewall. I’m mainly interested in ISAs Caching feature.

The firewall forwards HTTP requests for site1.myCompany.com and site2.myCompany.com all to my ISA host.

I would like to setup a rule that forwards this requests to the “real” hosts.

How can I do this?

Regards,
Robert
Post #: 1
RE: Forwarding HTTP requests - 12.Oct.2007 1:36:19 PM   
abqtech

 

Posts: 216
Joined: 9.Mar.2004
Status: offline
you're using ISA as a reverse proxy to your "real" web servers correct? 
If so you want to create a new web site publishing rule (the wizard ISA present you with is pretty straight forward).  Let me know if you have any troubles with it.

(in reply to RobertL)
Post #: 2
RE: Forwarding HTTP requests - 14.Oct.2007 4:51:54 PM   
RobertL

 

Posts: 5
Joined: 11.Oct.2007
Status: offline
Yes, I use ISA as a reverse proxy. And I've tried a million ways so far to configure ISA (including all the wizards *g*).

It *should* be so straight forward - but it seems I'm missing something.

First a question: It is possible to run ISA and the webserver (IIS) on the same box. Requests coming in on port 80 and ISA forwards them to IIS (listening in port 80). Right?

I try to forward requests, based on the host headers, to different hosts. This should be possible with ISA, right?

I've created a new Firwall Policy "Web Site Publishing Rule". The properties are:

I guess the interesting properties are in "From",  "To", "Listener" and Public name.

I can see in the Monitoring window that request are coming in - they are just NOT passed to the webserver it seems.

Any help is appreciated!

Regards,
Robert

(in reply to abqtech)
Post #: 3
RE: Forwarding HTTP requests - 15.Oct.2007 9:56:18 AM   
abqtech

 

Posts: 216
Joined: 9.Mar.2004
Status: offline
as long as ISA and IIS are not configured to listen for requests on the same port, you can have them both installed on the same server.

(in reply to RobertL)
Post #: 4
RE: Forwarding HTTP requests - 17.Oct.2007 2:39:27 AM   
elmajdal

 

Posts: 6022
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline
Hi Robert ,

check this :
quote:


Configuring ISA Server with a Single Network Adapter Configuration
Problem: There are a number of issues associated with the configuration of ISA Server on a computer with a single network adapter.
Cause: The causes include:




•

Multi-network firewall policy. In single network adapter mode, ISA Server recognizes itself (the Local Host network). Everything else is recognized as the Internal network. There is no concept of an External network. The Microsoft Firewall service and application filters operate only in the context of the Local Host network. (ISA Server protects itself no matter what network template is applied.) Because the Firewall service and application filters operate in the context of the Local Host network, you can use access rules to allow non-Web protocols to the ISA Server computer. This has implications for running applications located on the ISA Server computer.


•

Application layer inspection. Application level filtering does not function, except for Web Proxy Filter for Hypertext Transfer Protocol (HTTP), Secure HTTP (HTTPS), and File Transfer Protocol (FTP) over HTTP.


•

Server publishing. Server publishing is not supported. Because there is no separation of Internal and External networks, ISA Server cannot provide the NAT functionality required in a server publishing scenario.


•

Firewall clients. The Firewall Client application handles requests from Winsock applications that use the Firewall service. In a single network adapter environment, this service is only available in the context of the Local Host network (protecting the ISA Server computer), and Firewall Client requests are not supported.


•

SecureNAT clients. SecureNAT clients use ISA Server as a router to the Internet, and SecureNAT client requests are handled by the Firewall service. In a single network adapter environment, this service is only available in the context of the Local Host network (protecting the ISA Server computer), and SecureNAT client requests are not supported.


•

Virtual private networking. Site-to-site virtual private networks (VPNs) are not supported in a single network adapter scenario. Remote client VPN access is supported in a single network adapter scenario.



source : http://www.microsoft.com/technet/isa/2004/plan/unsupportedconfigs.mspx

Specially point # 3.

_____________________________

Tarek Majdalani

Windows Expert - IT Pro MVP
Facebook : https://www.facebook.com/ElMajdal.Net

(in reply to RobertL)
Post #: 5

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA 2006 Web Proxy] >> Unihomed >> Forwarding HTTP requests Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts