[isalist] Re: Publishing an HTTPS site via ISA

  • From: "Ellis, John P." <johnellis@xxxxxxxxxxxxx>
  • To: <isalist@xxxxxxxxxxxxx>
  • Date: Tue, 13 Apr 2010 16:11:29 +0100

http://www.ISAserver.org
-------------------------------------------------------

Mmm access rule. I hadnt considered that one - worth a try. I do see it
being any less secure as its still HTTPS, IP address/ports tied down on
a firewall infront of ISA

John 

-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of D PIETRUSZKA USWRN INTERLINK INFRA SHIFT MGR
Sent: 13 April 2010 16:00
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: Publishing an HTTPS site via ISA 

http://www.ISAserver.org
-------------------------------------------------------
  
I don't know how safe it is, but create an access rule instead of a Web
Publishing rule.

Regards
Diego R. Pietruszka


-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Ellis, John P.
Sent: Tuesday, April 13, 2010 10:46 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Publishing an HTTPS site via ISA 

http://www.ISAserver.org
-------------------------------------------------------
  
Hi all. 
Is it possible with ISA to create a rule that will allow access to a
webpage that is secured via HTTPS but the certificate is not held on the
ISA servers? 

What we have is a HTTPS server in the DMZ that has its own cert applied
to the website via Tomcat. 

I would like to create a rule on ISA that accepts the SSL connection,
but just passed the connection to the DMZ server without doing anything
to the traffic. 

Outside user HTTPS > ISA > Server(with SSL cert applied to the website) 

We have the rule setup with ISA applying a SSL cert(wildcard type) and
the server running HTTP but this is causing caching/session ID issues. 

Those who frequent the http://forums.isaserver.org/ forum may see the
same post on there.

Thanks 

John

**********************************************************************
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they are
addressed. If you have received this email in error please notify the
system manager.

This footnote also confirms that this email message has been swept by
MIMEsweeper for the presence of computer viruses.

www.clearswift.com
**********************************************************************


------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx 


------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx 

------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx

Other related posts: