[isapros] Re: Fw: Re: Web Filter with HTTPS

Not to be pedantic, but the published traffic being handled by the web
proxy isn't "HTTPS", it's "HTTP inside SSL" and ISA handles each layer
separately.  By the time the web proxy is evaluating the HTTP traffic,
SSL is no longer a factor and it gets treated just like "plain old" HTTP
traffic.

-----Original Message-----
From: isapros-bounce@xxxxxxxxxxxxx [mailto:isapros-bounce@xxxxxxxxxxxxx]
On Behalf Of Thor (Hammer of God)
Sent: Wednesday, June 20, 2007 2:26 PM
To: isapros@xxxxxxxxxxxxx
Subject: [isapros] Re: Fw: Re: Web Filter with HTTPS

Then how do you configure the HTTP filtering on web pub rules if the Web

Filter is not bound to HTTPS?

t
----- Original Message ----- 
From: "Jim Harrison" <Jim@xxxxxxxxxxxx>
To: <isapros@xxxxxxxxxxxxx>
Sent: Wednesday, June 20, 2007 2:24 PM
Subject: [isapros] Re: Fw: Re: Web Filter with HTTPS


> Sorta..
> if it's a web pub rule, then the web proxy is already involved and no
> "protocol binding" is required.
> If it's a server pub rule, then ISA is effectively blind to the
traffic
> anyway.
>
> -----Original Message-----
> From: isapros-bounce@xxxxxxxxxxxxx
[mailto:isapros-bounce@xxxxxxxxxxxxx]
> On Behalf Of Thor (Hammer of God)
> Sent: Wednesday, June 20, 2007 2:05 PM
> To: isapros@xxxxxxxxxxxxx
> Subject: [isapros] Fw: Re: Web Filter with HTTPS
>
> OK, so you are saying that if I unbind the Web Filter from HTTPS, and
> create
> a pub rule for HTTPS, then the filter will still be used for the Pub
> rule?
>
> t
>
>
> -----Original Message-----
> From: isapros-bounce@xxxxxxxxxxxxx
[mailto:isapros-bounce@xxxxxxxxxxxxx]
> On Behalf Of Jim Harrison
> Sent: Wednesday, June 20, 2007 5:43 PM
> To: isapros@xxxxxxxxxxxxx
> Subject: [isapros] Re: Web Filter with HTTPS
>
> The web filter is the part that expects to watch the HTTP traffic as
it
> flows through ISA.
> With the exception of web publishing, HTTPS traffic is effectively
> invisible to ISA and therefore any policies enacted via the web filter
> (think HTTP Filter, too) cannot be applied and ISA will default to
"when
> in doubt, trash it" mode.
>
> -----Original Message-----
> From: isapros-bounce@xxxxxxxxxxxxx
[mailto:isapros-bounce@xxxxxxxxxxxxx]
> On Behalf Of Thor (Hammer of God)
> Sent: Wednesday, June 20, 2007 1:15 PM
> To: isapros@xxxxxxxxxxxxx
> Subject: [isapros] Web Filter with HTTPS
>
> Just a sanity check here... why would all HTTPS traffic fail if the
Web
> Filter was bound to the HTTPS protocol?
>
> t
>
> All mail to and from this domain is GFI-scanned.
>
>
>
>
> All mail to and from this domain is GFI-scanned.
>
> 



All mail to and from this domain is GFI-scanned.

Other related posts: