RE: R: RE: Problems with web publishing (isa2004 std )
- From: "Jim Harrison" <Jim@xxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Fri, 29 Oct 2004 07:53:10 -0700
Again; IF the CSS is using cookies to load balance, ISA isn't the problem.
It sounds like the Cisco is using IP-affinity more than cookies.
All web published traffic from ANY CERN proxy will come from the proxy internal
IP.
You can try changing the web publishing rule to send the original client IP.
You set this in the "To" tab ofd the web publishing rule.
This also means that the web servers will have to use the ISA internal IP as
their default route to the Internet.
ISA 2004 is an HTTP/1.1 client, I don't know what you're stating here.
-------------------------------------------------------
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://isaserver.org/Jim_Harrison/
http://isatools.org
Read the help / books / articles!
-------------------------------------------------------
-----Original Message-----
From: Rossiello Fabio [mailto:Rossiello.Fabio@xxxxxxx]
Sent: Wednesday, October 27, 2004 23:53
To: [ISAserver.org Discussion List]
Subject: [isalist] R: RE: Problems with web publishing (isa2004 std )
http://www.ISAserver.org
Yes, but seem that isa with only one rule(web publishing)send all tcp packet
that receive and css read the first cookie ( used for affinity) and redirect
traffic to the same ( but wrong) web-server..
I supposed that...
We don't be able to use Cisco Load balancer with isa2004 ! All the apps
required affinity and probably http 1.1 communication with css(isa doesn't
work in http1.1 rfc but "modified" )create these errors !
But if i publish a NLB resource (3 IIS6 web-server) with 1 rule (for 1 vip)
probably i don'have these errors ..ANY experience on that ?(publish nlb vip
with 3 web server with single affinity with integrated authentication for
example...)
Thanks for your comments
Fabio r.
-----Messaggio originale-----
Da: Jim Harrison [mailto:Jim@xxxxxxxxxxxx]
Inviato: giovedì 28 ottobre 2004 3.19
A: [ISAserver.org Discussion List]
Oggetto: [isalist] RE: Problems with web publishing (isa2004 std )
http://www.ISAserver.org
ISA has nothing to do with how the CSS device chooses to balance the
connections.
If you've published the VIP, then the CSS device is responsible for any
connection affinity.
-------------------------------------------------------
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://isaserver.org/Jim_Harrison/
http://isatools.org
Read the help / books / articles!
-------------------------------------------------------
-----Original Message-----
From: fabio [mailto:rossiello.fabio@xxxxxxx]
Sent: Wednesday, October 27, 2004 08:45
To: [ISAserver.org Discussion List]
Subject: [isalist] Problems with web publishing (isa2004 std )
http://www.ISAserver.org
Hi ,
we have web-published our internal web based application with isa2004 .
We have replaced old reverse proxy netscape 3.6 .
our web based application is installed on 6 web-server IIS and on our isa we
have published a virtual ip address (balanced ip with cisco load balancing hw
CSS ) .
seem that ISA doesn't maintain affinity with web server or isa send all packets
( packets optimization ??? ) to 1 web server ...
any idea ?
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading Network
Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security
Resource Site: http://www.windowsecurity.com/ Network Security Library:
http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
All mail to and from this domain is GFI-scanned.
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading Network
Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security
Resource Site: http://www.windowsecurity.com/ Network Security Library:
http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
rossiello.fabio@xxxxxxx To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
Nota di riservatezza : Il presente messaggio, corredato dei relativi allegati,
contiene informazioni da considerarsi strettamente riservate ed è destinato
esclusivamente al destinatario sopra indicato, il quale è l'unico autorizzato
ad usarlo, copiarlo e, sotto la propria responsabilità, diffonderlo. Chiunque
ricevesse questo messaggio per errore o comunque lo leggesse senza esserne
legittimato è avvertito che trattenerlo, copiarlo, divulgarlo, distribuirlo a
persone diverse dal destinatario è severamente proibito ed è pregato di
rinviarlo immediatamente al mittente distruggendone l'originale. Grazie.
Confidentiality Notice : This message, together with its annexes, contains
information to be deemed strictly confidential and is destined only to the
addressee(s) identified above who only may use, copy and, under his/their
responsibility, further disseminate it. If anyone received this message by
mistake or reads it without entitlement is forewarned that keeping, copying,
disseminating or distributing this message to persons other than the
addressee(s) is strictly forbidden and is asked to transmit it immediately to
the sender and to erase the original message received.
Thank you.
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
All mail to and from this domain is GFI-scanned.
Other related posts:
