• Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

URL based route select?

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA 2006 Firewall] >> VPN >> URL based route select? Page: [1]
Message << Older Topic   Newer Topic >>
URL based route select? - 10.Jan.2013 7:41:04 PM   


Posts: 2
Joined: 10.Jan.2013
Status: offline
I am sorry to re-post the question here.
Hello, I have a question regarding the ISA configuration for my office. I worked in a branch office (50 PCs) off main campus. We have public internet connection (3 MB/S) provided by ISP. The main campus subscribe some internet published journals and magzines (the publisher of these journals and magzines only accept the IP address of main campus). Now we have an vpn account (only 50 KB/S) going THROUGH main campus network to view these journals and magzines. Here we want the ISA server determine the route by URL, for example: if some of PCs in my branch office want to view these jouranls and magzines, the ISA will direct these connections through the narrow VPN route; if the PCs in the branch office just do some google or hotmail, the ISA will direct these connections to the public route. Is there any solution for these complicated structure? Thank you very much!
Post #: 1
RE: URL based route select? - 11.Jan.2013 4:44:16 PM   


Posts: 2244
Joined: 12.Apr.2004
From: Taylorville, IL
Status: offline
That is impossible with URLs.

But you can do it based on the IP# or the IP Subnet owned by the Publishers of the material.

However you will not be able to control the routing via the ISA. The traffic must go directly from the Client to either a LAN Router or the VPN Device,...if it passes through the ISA it will create an Asymetrical Routing situation,...so that traffic should never "touch" the ISA at all. It is also required so that Browser's proxy settings or the installed Firewall Client (TMG Client) does not interferre with the traffic.

The ISA needs the Target IP# or Subnet to be added to the Internal Network Definition. The ISA then needs a Static Route telling it that the Gateway for the destination is whatever the proper routing device for that path would be. The ISA will never actually do that routing but it must have the routing accounted for so it doesn't throw errors.


Phillip Windell

(in reply to asymmcx)
Post #: 2

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA 2006 Firewall] >> VPN >> URL based route select? Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts