http://www.ISAserver.org ------------------------------------------------------- We still don't have all the details of the rules, so a specific answer is near-impossible. Q1 - were all of the rules created using the SP publishing weirdzard? If not, do it now; do not pass 'GO', do not collect $300 Q2 - what are in the ISA logs for these failed requests? If you get an auth popup, it's likely that the auth delegation is incorrect in one or more of the rules Jim -----Original Message----- From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of William T Holmes Sent: Monday, November 17, 2008 9:18 AM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Re: Publishing Sharepoint http://www.ISAserver.org ------------------------------------------------------- Hello, So I have re-done all of this to use SSL end to end. Now that we have that out of the way can anyone answer my original question? I have three publishing rules that were created by the ISA-2006 Sharepoint Site Publishing Rule Wizard. They are: sharepoint.mydomain.com mysite.mydomain.com sharepointSSP.mydomain.com They are all using SSL to SSL bridging with NTLM Authentication Delegation. When I connect to the sharepoint server internally everything is good. MySite works. However when I connect to the published sites through ISA server The mysite link does not show up. In addition If I go directly to https://mysite.mydomain.com I receive an authentication error. The site indicates my logon name which has access and can access the site when connecting internally. Thanks Bill -----Original Message----- From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Greg Mulholland Sent: Thursday, November 13, 2008 3:30 PM To: ISA Mailing List Subject: [isalist] Re: Publishing Sharepoint http://www.ISAserver.org ------------------------------------------------------- In general we would recommend when you are publishing websites that require authentication or dont live in (my favourite new term) 'sacrificial dmz' that you would use SSL. I know what this means for you when using sharepoint, ive been there. How many websites are you publishing? What sort of authentication do you use? btw If you do look at SSL factor in the cost of certificates, otherwise it will just be a pain for end users. ________________________________________ From: isalist-bounce@xxxxxxxxxxxxx [isalist-bounce@xxxxxxxxxxxxx] On Behalf Of William T Holmes [wth1@xxxxxxxxxxx] Sent: Friday, 14 November 2008 12:44 AM To: ISA Mailing List Subject: [isalist] Re: Publishing Sharepoint http://www.ISAserver.org ------------------------------------------------------- Hi, Can you be more specific regarding the audit statement? I have multiple SharePoint sites running on a single server. I am using host headers to distinguish the sites. In order to have SSL on the Sharepoint server I will either have to add additioanl or use alternate ports for the SSL connections. If this is what's necessary I will do so but I would prefer not to. Thanks Bill -----Original Message----- From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Thomas W Shinder Sent: Thursday, November 13, 2008 8:35 AM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Re: Publishing Sharepoint http://www.ISAserver.org ------------------------------------------------------- Use SSL to SSL bridging. You fail the security audit with SSL to HTTP. HTH, Tom ____________________________________________ TOM SHINDER | Sr. Consultant/Technical Writer 206.443.1117 | SHINDER@xxxxxxxxxxxxxxx 5701 Sixth Avenue South | Seattle, WA 98108 PROWESS | WWW.PROWESSCORP.COM ____________________________________________ > -----Original Message----- > From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On > Behalf Of > William T Holmes > Sent: Thursday, November 13, 2008 6:39 AM > To: isalist@xxxxxxxxxxxxx > Subject: [isalist] Re: Publishing Sharepoint > > http://www.ISAserver.org > ------------------------------------------------------- > > Hi, > > Can anyone offer any suggestions for this issue? > > Thanks > > Bill > > -----Original Message----- > From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On > Behalf Of > William T Holmes > Sent: Wednesday, November 05, 2008 10:45 PM > To: isalist@xxxxxxxxxxxxx > Subject: [isalist] Publishing Sharepoint > > http://www.ISAserver.org > ------------------------------------------------------- > > Hello, > > I am attempting to publish sharepoint with some success. However I am running > into > some problems. I am unable to publish my mysite virtual server. In addition > the mysite > link which appears if I connect to the sharepoint server directly does not > appear when > connecting through the published link. > > I have configured the Alternate Access Mappings for the sharepoint sites > within > sharepoint. I am only using SSL from the client to ISA and not from ISA to the > sharepoint server. > > The sharepoint server is serving three sites. sharepoint.mydomain.com, > mysite.mydomain.com and sharepointSSP.mydomain.com. These are all configured > to > use Port 80 with host headers. Sharepoint works as expected when connecting > internally. > > I have created three publishing rules one for each of these internalsites. The > publishing rules were created with the sharepoint publishing wizard. > > When connecting to mysite.myexternaldomainname.com I get the following error > > > Go back to site > Error > > > An unexpected error has occurred. > Troubleshoot issues with Windows SharePoint Services. > > > This is ISA Server 2006, Sharepoint 2007. > > I would appreciate any pointers. > > Thanks > > Bill > > > > > > ------------------------------------------------------ > List Archives: //www.freelists.org/archives/isalist/ > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp > ISA Server Articles and Tutorials: > http://www.isaserver.org/articles_tutorials/ > ISA Server Blogs: http://blogs.isaserver.org/ > ------------------------------------------------------ > Visit TechGenix.com for more information about our other sites: > http://www.techgenix.com > ------------------------------------------------------ > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp > Report abuse to listadmin@xxxxxxxxxxxxx > > ------------------------------------------------------ > List Archives: //www.freelists.org/archives/isalist/ > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp > ISA Server Articles and Tutorials: > http://www.isaserver.org/articles_tutorials/ > ISA Server Blogs: http://blogs.isaserver.org/ > ------------------------------------------------------ > Visit TechGenix.com for more information about our other sites: > http://www.techgenix.com > ------------------------------------------------------ > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp > Report abuse to listadmin@xxxxxxxxxxxxx > ------------------------------------------------------ List Archives: //www.freelists.org/archives/isalist/ ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/ ISA Server Blogs: http://blogs.isaserver.org/ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ To unsubscribe visit http://www.isaserver.org/pages/isalist.asp Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: //www.freelists.org/archives/isalist/ ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/ ISA Server Blogs: http://blogs.isaserver.org/ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ To unsubscribe visit http://www.isaserver.org/pages/isalist.asp Report abuse to listadmin@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx List Archives: //www.freelists.org/archives/isalist/ ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/ ISA Server Blogs: http://blogs.isaserver.org/ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ To unsubscribe visit http://www.isaserver.org/pages/isalist.asp Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: //www.freelists.org/archives/isalist/ ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/ ISA Server Blogs: http://blogs.isaserver.org/ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ To unsubscribe visit http://www.isaserver.org/pages/isalist.asp Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: //www.freelists.org/archives/isalist/ ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/ ISA Server Blogs: http://blogs.isaserver.org/ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ To unsubscribe visit http://www.isaserver.org/pages/isalist.asp Report abuse to listadmin@xxxxxxxxxxxxx