RE: ISA Server and Routing on a "Multipath Network" .

  • From: Glenn Maks <gmaks@xxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Thu, 26 Jun 2003 15:50:06 -0400

Say what again ???

-----Original Message-----
From: David V. Dellanno [mailto:ddellanno@xxxxxxxxxx]
Sent: Thursday, June 26, 2003 3:42 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: ISA Server and Routing on a "Multipath Network".


http://www.ISAserver.org


Is this right?

Internet---CP----DMZ----LAN
                      |
                     ISA
                      |
                Web Server

-----Original Message-----
From: William Holmes [mailto:wtholmes@xxxxxxxxxxxxxx] 
Sent: Thursday, June 26, 2003 3:20 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] ISA Server and Routing on a "Multipath Network".


http://www.ISAserver.org


I have the web server published by the ISA server which is sitting in a
DMZ protected via a checkpoint firewall. Any host from outside can view
the site just fine. However when the client computer attempts to connect
to the published server it fails. The ISA server is publishing the web
server on its external interface which is located in the DMZ. 

When the client computer from inside attemtps to connect it is doing so
through the CP Firewall from the internal net to the DMZ net and thus
the ISA servers external interface a packet is making it to the the ISA
Server's external interface (checked it with a network monitor) however
the ISA server is not responding on its external interface it is instead
responding on its internal interface to the client computer.

Is there a way to have the ISA server reply on the same interface as the
request comes in on. In other words I don't want the ISA server to make
any TCP/IP routing decisions. If the request comes in on the internal
interface I would like the replies to go out on the internal interface,
and likewise for the external interface.

I know I could set the client computer up to use the ISA server as a
proxy but that won't be possible for all clients in my network.

Thanks

Bill

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com No.1
Exchange Server Resource Site: http://www.msexchange.org Windows
Security Resource Site: http://www.windowsecurity.com/ Network Security
Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
ddellanno@xxxxxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')


Confidentiality Notice:
This e-mail message, including any attachments, is for the sole use of
the intended recipient(s) and may contain confidential and privileged
information. Any unauthorized review, use, disclosure or distribution is
prohibited. If you are not the intended recipient, please contact the
sender by reply e-mail and destroy all copies of the original message.


Confidentiality Notice:
This e-mail message, including any attachments, is for the sole use of the
intended recipient(s) and may contain confidential and privileged
information. Any unauthorized review, use, disclosure or distribution is
prohibited. If you are not the intended recipient, please contact the sender
by reply e-mail and destroy all copies of the original message.

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
gmaks@xxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

Other related posts: