Reroute to a local proxy (Full Version)

All Forums >> [ISA 2006 Web Proxy] >> General



Message

deep3 -> Reroute to a local proxy (2.Jun.2008 3:06:19 AM)

Hi everyone
 
We use ISA 2006 on Windows 2003 Server and have te following problem:
Normally all users use in IE the proxy settings server.domain.lan:8080 / http://server.domain.lan:8080/array.dll?Get.Routing.Script or has install the isa firewall client. But a special user group, who has access to a special government website, has install a local proxy software on the client. Before we installed the ISA Server, we used an proxy.pac file for this user group (see below)
 
Our special proxy.pac:
function FindProxyForURL(url, host)
{
if (shExpMatch(url, "https://portal.xxx.123.ch*")) 
return "PROXY localhost:8088";
  
if (isPlainHostName(host) ||
dnsDomainIs(host, ".local.domain.lan") ||                     
isInNet(host, "10.36.0.0", "255.255.0.0") ||
isInNet(host, "172.16.33.0", "255.255.255.0"))
return "DIRECT";
else
return "PROXY 172.16.1.1:8080";
}

Now my Question:
Is it possible to reroute the client to the local proxy software on the isa server, if the client wants to connect to https://portal.xxx.123.ch* ? We want to remove the special proxy.pac and implement it to the ISA Server.



HePa -> RE: Reroute to a local proxy (4.Jun.2008 6:37:05 AM)

The clients are configured as "Webprocy clients" and "Firewall Clients" as I understod? The get proxy settings so that their HTTP, HTTPS and FTP communication is gping through the ISA server? Am I right?

Configure the clients computers without the proxy settings as the other clients have and don't apply he firewall client on them and apply the other Prox settings. Wouldn't that work? You can do a GPO which applyes the Proxy settings on the clients and filter the GPO on a group, which the computers reside in. Maby I missunderstod the scenario but I can't see any problem in the situation.



deep3 -> RE: Reroute to a local proxy (4.Jun.2008 9:39:53 AM)

Hi Henrik, thanks for reply.
 
quote:

The clients are configured as "Webprocy clients" and "Firewall Clients" as I understod? The get proxy settings so that their HTTP, HTTPS and FTP communication is gping through the ISA server? Am I right?

 
Normally all clients are configure as "Webproxy Client" and all Internet traffic is going through the ISA.
 
quote:

Configure the clients computers without the proxy settings as the other clients have and don't apply he firewall client on them and apply the other Prox settings. Wouldn't that work?

 
There are some clients (with that special local proxy software) who has the firewall client install because they need acces to ftp-servers. Our ISA need user authentication for internet-access. This local proxy software is only for the access to the government website. This website is not accessible from the internet so there is a second connection through the BEWAN (thats a secured network from the cantonal Administration) and does not going through the ISA.
 
For clients with that special local proxy software and no firewall client we use now:
 
function FindProxyForURL(url, host)
{
if (shExpMatch(url, "https://portal.xxx.123.ch*"))
return "PROXY localhost:8088";
else
return "PROXY proxy.domain.local:8080";
}
It seems to work.
But there is still a problem those clients with the firewall client. In this case it doesn't work.



Page: [1]