RE: Need to bypass filter with proxy server
- From: "Quillman Shawn (RBNA/CSA1) *" <Shawn.Quillman@xxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Thu, 22 Jul 2004 12:11:50 -0400
That depends on what your network configuration is. Is this what you
have:
Internal net <-> ISA <-> Router <-> Internet
If so you would need
- a route from your Internal net to the router for the clients that need
to bypass the SmartFilter and then configure their browsers with the IP
address of the proxy the gvmt gave you. To prevent any unauthorized use
of the bypass you would also want to configure ACL's on your external
router to only allow traffic from authorized clients (and the ISA
obviously).
OR
- to bring up a second ISA to forward to the other proxy that bypasses
the SmartFilter.
-Shawn
-----
Shawn R. Quillman
Robert Bosch Corporation RBNA/CSA1
38000 Hills Tech Drive
Farmington Hills, MI 48331
(248) 553-1164 (P) (248) 848-6969 (F)
shawn.quillman@xxxxxxxxxxxx
-----Original Message-----
From: Barbara Causey [mailto:causeyb@xxxxxxxxxxxxxxxxxxxxxxxxxxx]
Sent: Thursday, July 22, 2004 11:06 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Need to bypass filter with proxy server
http://www.ISAserver.org
Yes, I need to completely bypass for some and completely filter for
others.
How would I need to set it up to bypass the ISA server?
Thank you for your help,
Barbara
----- Original Message -----
From: "Quillman Shawn (RBNA/CSA1) *" <Shawn.Quillman@xxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Thursday, July 22, 2004 10:56 AM
Subject: [isalist] RE: Need to bypass filter with proxy server
http://www.ISAserver.org
You specify all sites in the routing rule and use destination sets to
get more granular, but what you're thinking would confuse your routing
rules. Is your requirement such that you need to access all sites via
one route from certain clients and all sites via a different route from
other clients? In other words, do some clients need to access all sites
via the SmartFilter and some clients need to totally bypass the
SmartFilter? In that case you would probably need some way of bypassing
the ISA for the clients that need to bypass the SmartFilter.
-Shawn
-----
Shawn R. Quillman
Robert Bosch Corporation RBNA/CSA1
38000 Hills Tech Drive
Farmington Hills, MI 48331
(248) 553-1164 (P) (248) 848-6969 (F)
shawn.quillman@xxxxxxxxxxxx
-----Original Message-----
From: Barbara Causey [mailto:causeyb@xxxxxxxxxxxxxxxxxxxxxxxxxxx]
Sent: Thursday, July 22, 2004 10:37 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Need to bypass filter with proxy server
http://www.ISAserver.org
Thank you Shawn, but is there a way to create a destination set that
includes all sites?
Barbara
----- Original Message -----
From: "Quillman Shawn (RBNA/CSA1) *" <Shawn.Quillman@xxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Wednesday, July 21, 2004 5:10 PM
Subject: [isalist] RE: Need to bypass filter with proxy server
http://www.ISAserver.org
That will not work from your internal browsers unless you can somehow
bypass the ISA. The browsers are looking for the bypass proxy on your
internal network. If you don't have a way to bypass the ISA then you
would need to create a destination set containing the sites for which
you want to bypass the SmartFilter and then create a routing rule for
that set. For this routing rule you would want to route requests to the
upstream server that the state gave you. Make sure this rule is before
any routing rule(s) sending requests up the normal routing chain.
-Shawn
-----
Shawn R. Quillman
Robert Bosch Corporation RBNA/CSA1
38000 Hills Tech Drive
Farmington Hills, MI 48331
(248) 553-1164 (P) (248) 848-6969 (F)
shawn.quillman@xxxxxxxxxxxx
-----Original Message-----
From: Barbara Causey [mailto:causeyb@xxxxxxxxxxxxxxxxxxxxxxxxxxx]
Sent: Wednesday, July 21, 2004 4:19 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Need to bypass filter with proxy server
http://www.ISAserver.org
Hello again everyone,
Our router is plugged into our ISA server on the external nic and the
state gave us an IP address of a proxy server to use if we needed to
bypass SmartFilter, will this work with ISA? If I go into IE and put in
their proxy server IPaddress and then try to access the Internet I get:
can not access server or dns error.
Please help, I really need to be able to bypass the filter.
Thank you,
Barbara
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
shawn.quillman@xxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
causeyb@xxxxxxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
shawn.quillman@xxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Other related posts:
