• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Web server can't access internet from DMZ?

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA 2006 Firewall] >> DMZ >> Web server can't access internet from DMZ? Page: [1]
Login
Message << Older Topic   Newer Topic >>
Web server can't access internet from DMZ? - 6.Jun.2010 2:19:17 PM   
mdbradsh

 

Posts: 38
Joined: 22.Jul.2006
From: Indianapolis
Status: offline
Hi. I’m hoping for some help here.

I just got upgraded from ISA Server 2004 standard to ISA Server 2006 standard.

I previously had my network set up in ISA Server 2004 using the default “Edge Firewall” template, in which I had manually configured the DMZ with private IPs. Everything seemed to work fine and I had no problems.

As I understood from reading Dr. Shinder’s article on setting up DMZs, public IPs are needed or the DMZ is just considered another internal network by ISA Server. Since I recently upgraded my cable internet service and got 5 static IPs,I decided to upgrade to “ISA Server 2006 and set up my DMZ properly. I went ahead and assigned one of the static IPs to my DMZ adapter and another to my web server on the DMZ. I then set up ISA Server 2006 using the “3-Leg Perimeter” template.

IP details as follows;

Cable Router WAN IP:173.xxx.xx.78/29
LAN IP:10.x.xx.x/24

My ISA Server external nic IP: 10.x.xx.x/24
Internal Nic IP: 192.xxx.x.xxx/24
DMZ Nic IP:173.xxx.xx.74/29

Web server IP: 173.xxx.x.74/29

Problems are:
1) I cannot access the internet from web server on
the DMZ, which strikes me as odd since my website
seems to work?

2) My web server also serves as public DNS, which
seems to work for the web site but does not resolve
the web server name itself?

I've tried creating rules to allow the DMZ internet access but have not been successful getting it to work. Be glad to provide any additional information and appreciate any help on this as if I cant get it resolved I’ll have to revert back to ISA Server 2004 and my original configuration.

Thanks in advance,
MDBRADSH

< Message edited by mdbradsh -- 7.Jun.2010 5:07:23 PM >
Post #: 1
RE: Web server can't access internet from DMZ? - 7.Jun.2010 5:50:02 PM   
mdbradsh

 

Posts: 38
Joined: 22.Jul.2006
From: Indianapolis
Status: offline
UPDATE - I read in a previous post about enabling web proxy on the perimeter and gave it a shot. This seems to have worked, so for now everything is working. Thanks anyway!

< Message edited by mdbradsh -- 7.Jun.2010 5:51:51 PM >

(in reply to mdbradsh)
Post #: 2

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA 2006 Firewall] >> DMZ >> Web server can't access internet from DMZ? Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts