RE: BUG in ISA with VPN and SSL...Any ideas Tom...Jim...

  • From: "Thomas W Shinder" <tshinder@xxxxxxxxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Mon, 24 Feb 2003 16:05:46 -0600

Hi Steve,

Are the ISA Server's acting as both VPN and OWA servers? The tunnel
endpoints need to be the primary IP address on the external interface of
each ISA Server (I'm assuming that you're not creating a ISA/VPN gateway
tunnel inside a tunnel created by routers connecting your sites).

Thanks!
Tom
Thomas W Shinder
www.isaserver.org/shinder 
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp

 
 


-----Original Message-----
From: Steve Moffat [mailto:steve@xxxxxxxxxxxxxxx] 
Sent: Monday, February 24, 2003 4:02 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] BUG in ISA with VPN and SSL...Any ideas Tom...Jim...


http://www.ISAserver.org


Hi

Is it me or is it a bug.

I have site to site vpn's (3). They work as they're supposed to. I have
OWA with SSL. It works as it's supposed to. They just don't work
together.

Let me explain.

To have successful vpn's the wan adapter has to be the North. Fine. If
the wan adapter is changed to south, then the vpn's drop and reconnect
continuously when being accessed, apparently this is by design.

This config (WAN/North), returns a proxy loop error, if you try to
access an ssl site published by FQDN.

If I change the nic order to LAN/North, OWA/SSL works fine. Vpn's drop.

Have you any idea how I can get the 2 to work together or is it just one
or the other.

Thanks

Steve

This E-Mail is confidential. It is not intended to be read, copied,
disclosed or used by any person other than isalist@xxxxxxxxxxxxxx

Unauthorised use, disclosure, or copying is strictly prohibited and may
be unlawful. Optimum Computer Solutions disclaims any liability for any
action taken in connection of this E-Mail. The comments or statements
expressed in this E-Mail are not necessarily those of Optimum Computer
Solutions or its subsidiaries or affiliates.

usermanager@xxxxxxxxxxxxxxx



------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')


Other related posts: