Welcome to ISAserver.org

RE: Outbound Web Requests on port 8080

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2000 Firewall] >> General >> RE: Outbound Web Requests on port 8080

Page: << < prev 1 [2]

Message

<< Older Topic Newer Topic >>

RE: Outbound Web Requests on port 8080 - 31.Jan.2003 2:45:00 AM

lewishan

Posts: 34
Joined: 14.Oct.2002
Status: offline

Hi Guys,
The problem is now fixed. [Big Grin]

Stefaan you were right. I forgot to add the protocol rule in for port 8080 to the external ISA server as the internal ISA is configured as a secureNAT client to it.

I got the impression that if I was using proxy chaining, I wouldn't have had this issue. I didn't think I would require proxy chaining given that I'm not going to be using the external ISA for caching. Is there other reasons why I should configure proxy chaining and would you recommend doing it?

Thanks again guys.

Dan.

(in reply to lewishan)

Post #: 21

Featured Links*

RE: Outbound Web Requests on port 8080 - 31.Jan.2003 6:29:00 AM

tshinder

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Dan,

Good to hear you got it working! [Big Grin]

I forgot that you didn't have ISA Server and Beyond. In this I recommend that you use Web Proxy chaining because you can exert user based access control and assign an account to the downstream ISA Server. You can then create an all open Protocol Rule to that downstream server and assign it to the downstream Web Proxy service account. The reason why I recommend this is that you exert the bulk of your access controls on the downstream ISA Server in regards to outbound requests from internal network clients. You don't need to double your effort by recreating those rules on the upstream; you can allow the downsteam Web Proxy user account full access.

This is advantageous because you can put servers on the DMZ and assign different outbound access control, or completely prevent outbound access from those servers by just not creating a rule to allow them outbound access. Web Proxy chaining also allows you to cache content on both servers, so that if your cache becomes corrupt on the downsteam ISA Server, you still have the upstream content and you don't have to waste bandwidth refilling the cache; you just get it from the upstream.

One thing you have to watch out for when you using Web Proxy chaining is routing loop errors. I've typed too much already here already, but you can learn the details in ISA Server and Beyond.

HTH,
Tom

(in reply to lewishan)

Post #: 22

RE: Outbound Web Requests on port 8080 - 31.Jan.2003 11:10:00 PM