[isalist] Re: Problems with Traffic/Stats Software not reporting properly...
- From: "Gerald Young" <g.young@xxxxxxxx>
- To: <isalist@xxxxxxxxxxxxx>
- Date: Fri, 18 Aug 2006 18:31:25 -0400
http://www.ISAserver.org
-------------------------------------------------------
There's just a couple of things you need to keep in mind.
The path back to the Internet from the protected web servers will need
to pass back through ISA, otherwise, you'll end up with asynchronous
routing of traffic.
Inbound Request: Internet -> ISA -> Published Server
Outbound Response: Published Server -> Some other firewall/router ->
Internet
You'll also want to make sure that ISA isn't sitting in a DMZ protected
by a different firewall. If it is, you'll need to be sure to allow the
traffic from Internet IPs to pass back through the back side firewall.
Front Side Firewall -> DMZ ISA -> Back Side Firewall
If you're doing the standard Internet -> ISA -> Published Server,
though, you should be fine with just the publishing and flipping that
setting to allow ISA to pass back the source IP. Providing, of course
that the path to the Internet from the published servers passes back
through the ISA box.
Published Server -> ISA -> Internet
Cordially yours,
Jerry G. Young II
Applications Engineer, Platform Engineering
Enterprise Hosting
NTT America, an NTT Communications Company
22451 Shaw Rd.
Sterling, VA 20166
Office: 571-434-1319
Fax: 703-333-6749
Email: g.young@xxxxxxxx
> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx
[mailto:isalist-bounce@xxxxxxxxxxxxx]
> On Behalf Of Steve Moffat
> Sent: Friday, August 18, 2006 6:12 PM
> To: ISA Mailing List
> Subject: [isalist] Re: Problems with Traffic/Stats Software not
reporting
> properly...
>
> http://www.ISAserver.org
> -------------------------------------------------------
>
> No you have it right. If you select the "requests appear to come from
> the original user" in ISA 2004 or 2006, then the originating IP
address
> is passed to the published server.
>
> Steve
>
> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx
[mailto:isalist-bounce@xxxxxxxxxxxxx]
> On Behalf Of Mike Anderson
> Sent: Friday, August 18, 2006 7:10 PM
> To: ISA Mailing List
> Subject: [isalist] Problems with Traffic/Stats Software not reporting
> properly...
>
> http://www.ISAserver.org
> -------------------------------------------------------
>
> Hello All,
>
> I was under the impression that when setting up the Web Listeners, and
> selecting "requests appear to come from the original user" (or
something
> to that effect), that this would address the problems relating to Web
> Servers sitting behind Firewalls, and everything now appearing to come
> from a single IP Address.
>
> Am I overlooking something, or do I need to invest in a 3rd Party
> package that can pass along the originating requestor, so that we can
> get accurate stats?
>
> My clients business, depends entirely on these Stats and they are
> getting pretty nervous in the meantime.
>
> Could anybody throw any information my way, that could help me out in
> this regard?
>
> Thanks in advance,
>
> Mike
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials:
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx
>
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials:
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
Other related posts:
