ISA redirect proxy (Full Version)

All Forums >> [ISA 2006 Firewall] >> General



Message

satheesh -> ISA redirect proxy (1.Jul.2008 4:35:33 AM)

I have a query. In my organization users are using internet browsing service through ISA2006 proxy server. As usual this proxy is connected to DMZ of the firewall and using a dedicated internet line.
The query is: - Users wanted to access a particular website e.g.: www.yahoo.com and we would like to use a different line only for this website access. I need something like what ever the request coming on the common proxy for this particular site has to be gone through different firewall/internet line.
How can I achieve this? Appreciate your advice.
Thanks in advance..
Satheesh S Kumar



tshinder -> RE: ISA redirect proxy (1.Jul.2008 7:54:08 AM)

So, for requests for www.yahoo.com, you do not want them to go through the firewall?

Thanks!
Tom



satheesh -> RE: ISA redirect proxy (1.Jul.2008 8:07:55 AM)

Appreciate the prompt response.

The website is not yahoo, it is www.hiringsolutions.com and our requirement is that when ever any user tries to access this website, they should be redirected to a seperate line(different firewall will be alloted for this line).

Thanks,
Satheesh



paulo.oliveira -> RE: ISA redirect proxy (1.Jul.2008 4:53:28 PM)

Hi,

so, requests will not pass through ISA at all? You need to create a static route in the equipament before reach ISA for the particular network of this website.

Some like:
route add -p Destination_Net mask Network_Mask IP_of_Different_firewall

Regards,
Paulo Oliveira.



satheesh -> RE: ISA redirect proxy (2.Jul.2008 12:23:47 AM)

Yes Paulo, I dont want to pass this request through this proxy at all.
You mean to say add a static route as adviced by you on the ISA server with a higher metric??
Or if I have another proxy, shall I create a web chaining rule to redirect this request to the second proxy?

Thanks,
Satheesh



paulo.oliveira -> RE: ISA redirect proxy (2.Jul.2008 8:00:35 AM)

Hi,

no, you should not create this route on ISA server. Cause this way the traffic will pass through ISA and thatīs not what you want.
What I mean is if you have a manager switch between ISA and the client machine, you must add the route in there, otherwise, you must add the route on the clients machines itself.

Regards,
Paulo Oliveira.



tshinder -> RE: ISA redirect proxy (2.Jul.2008 9:21:02 AM)

OK, so the destination must not pass through the firewall. In that case, you might configure your LAN routers to redirect connections to that URL so that they aren't forwarded through the firewall. The firewall itself won't be able to do that for you.

HTH,
Tom



Page: [1]