Welcome to ISAserver.org

proxy settings

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Cache] >> Web Proxy client >> proxy settings

Page: [1]

Message

<< Older Topic Newer Topic >>

proxy settings - 5.Sep.2007 6:45:29 AM

walter81

Posts: 3
Joined: 5.Sep.2007
Status: offline

Hi,

We currently have a firewall we're going to replace in the not-so-very-far future. This firewall is also our proxy-server for internet access.

I'm setting up an ISA 2004 server to provide internet access. This works fine accept I'm having some trouble with a few internal websites.

We've got 3 plants (connected via a WAN): A, B and C

at all 3 plants we've got an application that's only accessable via httpS://x.x.x.x:444, we also have another application at plant A (where the ISA server is located) wich is assessible via http://x.x.x.x:8080

At the ISA server I've

added port 444 to the SSL port list
enabled webproxy for the internal network wich has
- all network ranges from the 3 plants in the addresses tab
- web proxy enabled
- "bypass proxy for webservers in this network" enabled
- "bypass proxy for computers specified in the domains tab" enabled
enabled webproxy for the local host network
added port 444 to the protocol list and enabled it for inbound connections.
created a new firewall rule for HTTP(S), FTP and port444 trafic from the internal to the external network
enabled auto discovery for the internal network

I've set my connection settings to "automatic configuration file" with location "http://isaserver/wpad.dat" at my PC in plant A and a test PC in plant B & C.

And this is the result:

* internet works just fine

* at plant A I can only access the https:444-site for plant A, at the other 2 plants I can access them all 3.
At plant A I receive this error for the other 2 https:444-sites:
Error Code: 502 Proxy Error. The ISA Server denied the specified Uniform Resource Locator (URL). (12202)

* the http:8080 site works only in plant A (were that server is located), at the other 2 plants I receive the same error (Error Code: 502 Proxy Error. The ISA Server denied the specified Uniform Resource Locator (URL). (12202))

what am I doing wrong?

< Message edited by walter81 -- 5.Sep.2007 6:49:18 AM >

Post #: 1

Featured Links*

RE: proxy settings - 27.Nov.2007 10:12:16 AM

abqtech

Posts: 216
Joined: 9.Mar.2004
Status: offline

Make sure you have SP2 or SP3 installed on your ISA Server. In the ISA MMC goto:
Configuration -> Networks -> Internal -> Web Browser
And add/modify your internal domains to include a trailing /*
i.e. assuming you want all web proxy requests to bypass ISA for your entire domain. You should add domain.com in the Web Browser tab as:
*.domain.com/*

See if that resolves the problem.

(in reply to walter81)

Post #: 2