RE: Certificate server with ISA

  • From: LCHUZEL@xxxxxxxxxxxxxxxxxx
  • To: isalist@xxxxxxxxxxxxx
  • Date: Mon, 22 Oct 2001 13:30:12 +0200

Hi I don't know if it work with isa but it is what i do with MS PROXY 2.0 to
publish a NT 4 server ( IIS server) :

I install the certificate on my PROXY and i publish the site using the
adress of my proxy .
I add in my web publishing HTTPS:\\myproxy:   to HTTP:\\myNT4SERVER and i
open port 443 on my proxy and i ask my proxy to talk in port 80 to my inside
server
I do not install certificate on my inside SERVER because it doesn't work
well if you install two certificates .
If you want to be in SSL from your client to your inside server you need two
different certificate ( one for the proxy and the second for the inside
server

Good luck

> Laurent Chuzel - Architecture Sécurité NT
        RES\DOS\IRS\INL\INT
> lchuzel@xxxxxxxxxxxxxxxxxx
> Tél : 01.41.09.27.06
> 
        VENI VIDI VICI



> -----Message d'origine-----
> De:   Vinaykumar G [SMTP:G.Vinay@xxxxxxxxx]
> Date: lundi 22 octobre 2001 13:14
> À:    [ISAserver.org Discussion List]
> Objet:        [isalist] Certificate server with ISA
> 
> http://www.ISAserver.org
> 
> 
> Hi All,
>         I need some clarifications about configuring certificate server
> for
> ISA. I have ISA server installed in Firewall Mode.
> I have published a webserver using web publishing rules which works fine.
> Now I wanted to make that site secure and hence I installed the
> certificate
> server on the webserver(NT4.0),using https. Now how do I clients to access
> that webpage from outside world.
>  I tried with SSL Bridging and configured ISA to listen on port 443 but it
> did not work. when configuring ISA its asking to select a certificate but
> it
> is not able to pick from NT 4.0 webserver. Please advice on how to go
> about
> it. IS ISA not showing the certificate because its a NT4.0 PC or..... iam
> I
> missing something.
> 
> 
> Regards,
> vinay.
> MCP+I, MCSE.
> 
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> lchuzel@xxxxxxxxxxxxxxxxxx
> To unsubscribe send a blank email to $subst('Email.Unsub')


Other related posts: