Welcome to ISAserver.org

auto proxy client

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Cache] >> Web Proxy client >> auto proxy client

Page: [1]

Message

<< Older Topic Newer Topic >>

auto proxy client - 20.Feb.2004 1:16:00 AM

Beboen

Posts: 24
Joined: 16.Nov.2003
From: Belgium
Status: offline

Hi Tom,

I still have some issues. When auto proxy is enabled on the client and http/1.1 over proxy too, I still can't get to some sites like passport (though this is not all the time).

Also, I use a VPN connection for work. When auto proxy is enabled, I can't connect our intranet (DNS gateway timeout). If I set it to fixed proxy (either ISA2K4 or my ISP's) or if I use my ISP's autoproxy I don't have the problem.

Especially this VPN thingy is worriing me.

Any thoughts on this?

Thanks in advance,
Beboen

Post #: 1

Featured Links*

RE: auto proxy client - 20.Feb.2004 12:13:00 PM

tshinder

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Beboen,

If you're connected to the remote network using VPN, you should configure the browser to use the Web Proxy server on the VPN network, you can do this for the VPN dial-up connection in the browser. This way, you protect the remote network from yours, and you don't violate the remote network's security policy.

HTH,
Tom

(in reply to Beboen)

Post #: 2

RE: auto proxy client - 23.Feb.2004 9:40:00 AM

Beboen

Posts: 24
Joined: 16.Nov.2003
From: Belgium
Status: offline

Hey Tom,

The VPN network doesn't use a proxy.

Brgds,
Beboen

(in reply to Beboen)

Post #: 3

RE: auto proxy client - 24.Feb.2004 12:21:00 AM

tshinder

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Beboen,

What type of network security do they have? Is it safe for you to connect to it?

Thanks!
Tom

(in reply to Beboen)

Post #: 4

RE: auto proxy client - 24.Feb.2004 11:14:00 AM

Beboen

Posts: 24
Joined: 16.Nov.2003
From: Belgium
Status: offline

Hey Tom,

Yes, they use their own firewall. I use IPSec to connect to them (Nortel Extranet Access client).

I can ping to the internal sites (on non-public DNS) but connecting to it through IE doesn't work, except when I use a fixed proxy.

My routing table gets altered when the VPN connection is made so that several subnets will use the VPN connection.

Do you think adding a direct connection for their domain in the ISA routing policy might work? I'll try that today.

Brgds,
Beboen

(in reply to Beboen)

Post #: 5

RE: auto proxy client - 27.Feb.2004 12:43:00 AM

tshinder

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Beboen,

That might work. Let us know what happens after your test.

Thanks!
Tom

(in reply to Beboen)

Post #: 6

RE: auto proxy client - 27.Feb.2004 1:49:00 PM

Beboen

Posts: 24
Joined: 16.Nov.2003
From: Belgium
Status: offline

Hey Tom,

Just discovered how come manual proxy works but auto proxy doesn't. In IE I added a rule to go directly to *.company.com and bypass the proxy.

Though, when I add a direct routing rule on ISA it doesn't work because the connection is made from the client and not from ISA.

Is there a way to tell the client not to use a proxy for certain sites. So maybe by editing wpad.dat manually?

Thanks in advance,
Beboen

(in reply to Beboen)

Post #: 7

RE: auto proxy client - 27.Feb.2004 11:40:00 PM

tshinder

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Beboen,

Only if the client was going through the Web Proxy service on the ISA firewall. You could configure the client to use the autoconfiguration script and use Direct Access for domains you choose.

However, if you're not going through the Web Proxy service, you could use Group Policy to configure the browser to bypass the Web Proxy for those domains.

HTH,
Tom

(in reply to Beboen)

Post #: 8

RE: auto proxy client - 5.Mar.2004 1:50:00 PM

Beboen

Posts: 24
Joined: 16.Nov.2003
From: Belgium
Status: offline

Hey Tom,

I got it to work finally. Here's what I did.

On ISA2K4 I installed the VPN client. Then I created a direct route for the *.company.com (rember I'm obliged to use my ISP's proxy for web access). Now traffic to *.company.com goes through the VPN client and not through my ISP's proxy. If I want I can create an additional rule for www.company.com and support.company.com for their public web sites to go through my IPS's proxy but I haven't done this yet.

Modifying the group policies was not an option because the laptop that has to connect is not a member of my home domain but from the company. So it won't accept the policies.

Thanks for the help provided,
Beboen

(in reply to Beboen)

Post #: 9

RE: auto proxy client - 7.Mar.2004 4:37:00 PM