RE: Problems viewing internal websites..

  • From: "Thomas W Shinder" <tshinder@xxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Thu, 17 Jun 2004 23:59:00 -0500

Hi Marvin,
 
The servers should never be configured as Firewall clients, but they can
be configured as Web Proxy clients without any problems.
 
The split DNS is always key, especially when dealing with SecureNAT
clients, because the SecureNAT client can never loop back through the
firewall to access servers on the Internal network. So you absolutely
need split DNS for these hosts.
 
HTH<
Tom
 
Thomas W Shinder
www.isaserver.org/shinder <http://www.isaserver.org/shinder> 
ISA 2004 Beta - Get it now!
http://www.microsoft.com/isaserver/beta/default.asp
<http://www.microsoft.com/isaserver/beta/default.asp> 
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp
<http://tinyurl.com/1llp> 

 

        -----Original Message-----
        From: Marvin Cummings [mailto:marvin.cummings@xxxxxxxxxxxxxxx] 
        Sent: Thursday, June 17, 2004 8:22 PM
        To: [ISAserver.org Discussion List]
        Subject: [isalist] RE: Problems viewing internal websites..
        
        
        http://www.ISAserver.org
        

        Looks as though to benefit from direct access it's best that I
configure my systems as web proxy and firewall clients. Being that I
only have 2 XP systems and the rest are all servers I chose not to use
these two features and go with SNAT instead. Now being that this indeed
constitutes a "small shop" do I really get anything out of direct
access? I will configure the HTTP director and Web browser, but this
doesn't seem to resolve my issue. 

        It did bring to light the fact that if I ping my 2 sites from an
internal system one returns the internal of the webserver and the other
one returns the external IP of the ISA server. 

         

        Hrrmm!!

         

        Thanks

         

        
________________________________


        From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx] 
        Sent: Thursday, June 17, 2004 9:07 PM
        To: [ISAserver.org Discussion List]
        Subject: [isalist] RE: Problems viewing internal websites..

         

        http://www.ISAserver.org

        Hi Marvin,

         

        The key is Direct Access for Web Proxy clients:

         

        
http://www.isaserver.org/tutorials/Configuring_Web_Proxy_Clients_for_Dir
ect_Access.html

         

        
http://www.isaserver.org/img/upl/spskit/10webproxyclients/10webproxyclie
nts.htm

         

        HTH,

        Tom

         

        
________________________________


        From: Marvin Cummings [mailto:marvin.cummings@xxxxxxxxxxxxxxx] 
        Sent: Thursday, June 17, 2004 7:29 PM
        To: [ISAserver.org Discussion List]
        Subject: [isalist] Problems viewing internal websites..

        http://www.ISAserver.org

        I'm wondering if someone can point me in right direction. I run
ISA 2000 on a w2k3 server with a few websites published to the outside.
I'm now trying to create a new website for both www and
internal.website.org but can't seem to see any of the pages. I've
created the website, the internal DNS records, a destination set and
publishing rule for this new site yet I still can't view it. 

        Can someone advise me on what I'm missing? I know it's something
simple. 

         

        Thanks

        ------------------------------------------------------
        List Archives:
http://www.webelists.com/cgi/lyris.pl?enter=isalist
        ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
        ISA Server FAQ:
http://www.isaserver.org/pages/larticle.asp?type=FAQ
        ------------------------------------------------------
        Other Internet Software Marketing Sites:
        World of Windows Networking: http://www.windowsnetworking.com
        Leading Network Software Directory: http://www.serverfiles.com
        No.1 Exchange Server Resource Site: http://www.msexchange.org
        Windows Security Resource Site: http://www.windowsecurity.com/
        Network Security Library: http://www.secinf.net/
        Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
        ------------------------------------------------------
        You are currently subscribed to this ISAserver.org Discussion
List as: tshinder@xxxxxxxxxxxxxxxxxx
        To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
------------------------------------------------------
        List Archives:
http://www.webelists.com/cgi/lyris.pl?enter=isalist
        ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
        ISA Server FAQ:
http://www.isaserver.org/pages/larticle.asp?type=FAQ
        ------------------------------------------------------
        Other Internet Software Marketing Sites:
        World of Windows Networking: http://www.windowsnetworking.com
        Leading Network Software Directory: http://www.serverfiles.com
        No.1 Exchange Server Resource Site: http://www.msexchange.org
        Windows Security Resource Site: http://www.windowsecurity.com/
        Network Security Library: http://www.secinf.net/
        Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
        ------------------------------------------------------
        You are currently subscribed to this ISAserver.org Discussion
List as: marvc@xxxxxxxxxxxxxxx
        To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist 

        ------------------------------------------------------
        List Archives:
http://www.webelists.com/cgi/lyris.pl?enter=isalist
        ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
        ISA Server FAQ:
http://www.isaserver.org/pages/larticle.asp?type=FAQ
        ------------------------------------------------------
        Other Internet Software Marketing Sites:
        World of Windows Networking: http://www.windowsnetworking.com
        Leading Network Software Directory: http://www.serverfiles.com
        No.1 Exchange Server Resource Site: http://www.msexchange.org
        Windows Security Resource Site: http://www.windowsecurity.com/
        Network Security Library: http://www.secinf.net/
        Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
        ------------------------------------------------------
        You are currently subscribed to this ISAserver.org Discussion
List as: tshinder@xxxxxxxxxxxxxxxxxx
        To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist 

Other related posts: