Welcome to ISAserver.org

RE: SSL Publishing (just doesnt work)

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2000 General] >> General >> RE: SSL Publishing (just doesnt work)

Page: << < prev 1 [2]

Message

<< Older Topic Newer Topic >>

RE: SSL Publishing (just doesnt work) - 24.Mar.2001 8:54:00 PM

jmunyan

Posts: 800
Joined: 3.Feb.2001
From: Seattle, WA
Status: offline

Yep that is the idea, terminate the tunnel at the webserver.

John

(in reply to swampy)

Post #: 21

Featured Links*

RE: SSL Publishing (just doesnt work) - 25.Mar.2001 1:58:00 AM

tshinder

Posts: 47439
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Jake,

I prefer to use the Web Proxy service to publish web sites because it doesn't lock down the port. Its primarily an issue if you have a single IP address on the external interface. Another thing is that you can't take advantage of reverse proxying, however, SSL connections are not placed in cache, so if you're only doing SSL, you're in good shape.

Performance might be improved my moving SSL connection requests off the ISA Server, but then you reduce performance on the web site. The nice thing about having ISA Server handle this is that it is dedicated to handling these requests, because you have properly configured it as a bastion host, so its not doing much other processing than what is dedicated to ISA related activities. The internal web server has to manage the SSL connections and retrieve the objects and run any programs that are on the site.

Overall, I suppose for SSL requests its a personal preference, but I am biased toward using the Web Proxy serivce to handle these things.

Tom

------------------
Tom Shinder
http://www.isaserver.org/shinder/

(in reply to swampy)

Post #: 22

RE: SSL Publishing (just doesnt work) - 25.Mar.2001 4:49:00 AM

jmunyan

Posts: 800
Joined: 3.Feb.2001
From: Seattle, WA
Status: offline

When you say web proxy service exactly how would one affect the configuration you are speaking of. I am a little confused.

John

(in reply to swampy)

Post #: 23

RE: SSL Publishing (just doesnt work) - 26.Jul.2001 10:36:00 PM

Rick

Posts: 6
Joined: 15.Jul.2001
Status: offline

Can you tell me how to export an SSL Certificate from IIS5?

quote:
Originally posted by swampy:
Please, please can someone help!
I am trying to publish a SSL Web Site behind ISA.
I have enabled SSL Listeners, exported the SSL Certificate from the secure server and imported it into the ISA server. From the incoming web requests box i have selected this certificate.
Whenever i attempt to browse to the SSL Site i get the following :
Internal Server Error 500
The Target Principle Name is incorrect

I have searched on Microsoft and this site for more details (I found another request here for more information) but got nothing!
Can anyone please help as this is causing us to grind to a halt!
Another interesting point is that if i go to the Publish Web Server options for this site, there appears to be an option to attach a server certitifcate here as well. Hitting the search buttons reports no certificates installed even though there is one!
Help!