Re: Binding problem... ISA - What are you thinking?

  • From: "Jim Harrison" <jim@xxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Fri, 18 Jan 2002 07:07:39 -0800

Web publishing rules are not external IP specific.
If you want your web publishing to be limited to a set of or single IP, you
set that in the Incoming web requests tab of the array properties.

Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://isaserver.org/authors/harrison/
Read the books!

----- Original Message -----
From: "Steven Sporen" <sporens@xxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Thursday, January 17, 2002 07:17
Subject: [isalist] Binding problem... ISA - What are you thinking?


http://www.ISAserver.org


Hi,

We've picked up on a problem with ISA server, we have three servers
protected by ISA two run a secure website (SSL) while the last is a custom
SSL application.

We use "Web publishing rules" with a certificate to publish the secure
website, ie. the cert is loaded onto ISA and requests are forwarded through
ISA into the web environment. The last server we use "Server Publishing
rules" to publish port 443 through to the custom SSL app.

The problem we seem to have is that I can't find where to specify which IP
addresses the "Web publishing rules" apply to. On our external interface we
have multiple public IP's, one is used for the secure site, while the other
is used for the custom app.

We implemented the custom ssl app yesterday, tested it and things worked
fine. Today however (about 24 hours later) the secure website stopped
responding and reported "ERROR: 1790 - Logon Failure, ISA Server", hunting
through ISA's logs and IIS's log we couldn't find anything. We then
proceeded to start rolling back configuration changes. We found that as soon
as we disabled the custom SSL application the website started working again.
Hmmm... ISA what are you thinking? We re-enabled the custom tunnel (As we
need it working) and everything is back up.

Is there somewhere I can specify the IP of the external interface the the
web publishing rules bind to? Has anyone else had this problem?
And last but not least - do you think upgrading to SP1 will fix this...
watching the list, we've decided to hold off for a week.

Regards
  Steven

Too many wizards not enough functionality

_________________________________________________________________
Send and receive Hotmail on your mobile device: http://mobile.msn.com


------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')




Other related posts: