[isalist] Re: SSL Bridging

  • From: "Jim Harrison" <Jim@xxxxxxxxxxxx>
  • To: <isalist@xxxxxxxxxxxxx>
  • Date: Mon, 15 May 2006 09:55:12 -0700

http://www.ISAserver.org
-------------------------------------------------------

No, it doesn't.
ISA logs it as "http://host.domain.tld:443";, but that's not the request that's 
being sent unless you configured the rule as such. 

Use ISABPA to help you sort this out.
http://www.microsoft.com/downloads/details.aspx?FamilyID=D22EC2B9-4CD3-4BB6-91EC-0829E5F84063

-------------------------------------------------------
   Jim Harrison
   MCP(NT4, W2K), A+, Network+, PCG
   http://isaserver.org/Jim_Harrison/
   http://isatools.org
   Read the help / books / articles!
-------------------------------------------------------
 

-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On 
Behalf Of Bradley Mendel
Sent: Monday, May 15, 2006 09:35
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: SSL Bridging

http://www.ISAserver.org
-------------------------------------------------------
  
I don't think you are understanding my problem.

I type https://fqdn/exchange.
ISA then requests http://serverowa:443/exchange.

The problem is that ISA is trying to request a web page over HTTP on port 443, 
when ISA should using HTTPS to begin with.  I have the redirect SSL to 443 
checked in my web publishing rule.

How do I get ISA to request https://serverowa/exchange, instead of 
http://serverowa:443/exchange?


On 5/13/06, Thomas W Shinder <tshinder@xxxxxxxxxxx> wrote:
> http://www.ISAserver.org
> -------------------------------------------------------
>
> OK, let me put it another way -- this is what mine says and its normal.
>
> So, its not a problem. Look for an alternate explanation or hypothesis 
> for why things aren't working.
>
> Thomas W Shinder, M.D.
> Site: www.isaserver.org
> Blog: http://spaces.msn.com/members/drisa/
> Book: http://tinyurl.com/3xqb7
> MVP -- ISA Firewalls
>
>
>
> > -----Original Message-----
> > From: isalist-bounce@xxxxxxxxxxxxx
> > [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Andrew English
> > Sent: Friday, May 12, 2006 11:44 PM
> > To: isalist@xxxxxxxxxxxxx
> > Subject: [isalist] Re: SSL Bridging
> >
> > http://www.ISAserver.org
> > -------------------------------------------------------
> >
> > Why are you being so MEAN today Tom? ;)
> >
> > Andrew
> >
> >
> > -----Original Message-----
> > From: isalist-bounce@xxxxxxxxxxxxx
> > [mailto:isalist-bounce@xxxxxxxxxxxxx]
> > On Behalf Of Thomas W Shinder
> > Sent: Friday, May 12, 2006 6:25 PM
> > To: isalist@xxxxxxxxxxxxx
> > Subject: [isalist] Re: SSL Bridging
> >
> > http://www.ISAserver.org
> > -------------------------------------------------------
> >
> > Again, this is NOT a problem.
> >
> > Look elsewhere for the solution.
> >
> > Thomas W Shinder, M.D.
> > Site: www.isaserver.org
> > Blog: http://spaces.msn.com/members/drisa/
> > Book: http://tinyurl.com/3xqb7
> > MVP -- ISA Firewalls
> >
> >
> >
> > > -----Original Message-----
> > > From: isalist-bounce@xxxxxxxxxxxxx 
> > > [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Bradley Mendel
> > > Sent: Friday, May 12, 2006 4:08 PM
> > > To: isalist@xxxxxxxxxxxxx
> > > Subject: [isalist] Re: SSL Bridging
> > >
> > > http://www.ISAserver.org
> > > -------------------------------------------------------
> > >
> > > I am sorry, but I don't understand.  We I try to access OWA
> > internally
> > > with http://owaserver:443/exchange I get a "Page could not be 
> > > displayed error". If this is what ISA is requesting from
> > IIS, then it
> > > sure is a problem  because currently there is no encryption 
> > > between ISA and OWA.
> > >
> > > I also want to configure RPC over HTTP through ISA and am
> > running into
> > > the same problem.
> > >
> > > Any direction would be greatly appreciated.  Thanks.
> > >
> > > On 5/12/06, Thomas W Shinder <tshinder@xxxxxxxxxxx> wrote:
> > > > http://www.ISAserver.org
> > > > -------------------------------------------------------
> > > >
> > > > This is not a problem. Looks elsewhere for problems.
> > > >
> > > > Thomas W Shinder, M.D.
> > > > Site: www.isaserver.org
> > > > Blog: http://spaces.msn.com/members/drisa/
> > > > Book: http://tinyurl.com/3xqb7
> > > > MVP -- ISA Firewalls
> > > >
> > > >
> > > >
> > > > > -----Original Message-----
> > > > > From: isalist-bounce@xxxxxxxxxxxxx 
> > > > > [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of
> > Bradley Mendel
> > > > > Sent: Friday, May 12, 2006 3:55 PM
> > > > > To: isalist@xxxxxxxxxxxxx
> > > > > Subject: [isalist] SSL Bridging
> > > > >
> > > > > http://www.ISAserver.org
> > > > > -------------------------------------------------------
> > > > >
> > > > > I am having a problem with SSL Bridging in ISA 2004.  When ISA 
> > > > > attempts to contact the OWA server it requests 
> > > > > http://owaserver:443/exchange.  This doesn't exist and
> > > IIS responds
> > > > > with.  How do I make ISA 2004 request 
> > > > > https://owaserver/exchange rather than 
> > > > > http://owaserver:443/exchange or is this an
> > > IIS problem?
> > > > >
> > > > > --
> > > > > Brad Mendel
> > > > > bmendel@xxxxxxxxx
> > > > > ------------------------------------------------------
> > > > > List Archives: //www.freelists.org/archives/isalist/
> > > > > ISA Server Newsletter:
> > > http://www.isaserver.org/pages/newsletter.asp
> > > > > ISA Server Articles and Tutorials:
> > > > > http://www.isaserver.org/articles_tutorials/
> > > > > ISA Server Blogs: http://blogs.isaserver.org/
> > > > > ------------------------------------------------------
> > > > > Visit TechGenix.com for more information about our other sites:
> > > > > http://www.techgenix.com
> > > > > ------------------------------------------------------
> > > > > To unsubscribe visit 
> > > > > http://www.isaserver.org/pages/isalist.asp
> > > > > Report abuse to listadmin@xxxxxxxxxxxxx
> > > > >
> > > > >
> > > > >
> > > > ------------------------------------------------------
> > > > List Archives: //www.freelists.org/archives/isalist/
> > > > ISA Server Newsletter:
> > http://www.isaserver.org/pages/newsletter.asp
> > > > ISA Server Articles and Tutorials:
> > > http://www.isaserver.org/articles_tutorials/
> > > > ISA Server Blogs: http://blogs.isaserver.org/
> > > > ------------------------------------------------------
> > > > Visit TechGenix.com for more information about our other sites:
> > > > http://www.techgenix.com
> > > > ------------------------------------------------------
> > > > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> > > > Report abuse to listadmin@xxxxxxxxxxxxx
> > > >
> > > >
> > >
> > >
> > > --
> > > Brad Mendel
> > > bmendel@xxxxxxxxx
> > > ------------------------------------------------------
> > > List Archives: //www.freelists.org/archives/isalist/
> > > ISA Server Newsletter:
> > http://www.isaserver.org/pages/newsletter.asp
> > > ISA Server Articles and Tutorials:
> > > http://www.isaserver.org/articles_tutorials/
> > > ISA Server Blogs: http://blogs.isaserver.org/
> > > ------------------------------------------------------
> > > Visit TechGenix.com for more information about our other sites:
> > > http://www.techgenix.com
> > > ------------------------------------------------------
> > > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> > > Report abuse to listadmin@xxxxxxxxxxxxx
> > >
> > >
> > >
> > ------------------------------------------------------
> > List Archives: //www.freelists.org/archives/isalist/
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server Articles and Tutorials:
> > http://www.isaserver.org/articles_tutorials/
> > ISA Server Blogs: http://blogs.isaserver.org/
> > ------------------------------------------------------
> > Visit TechGenix.com for more information about our other sites:
> > http://www.techgenix.com
> > ------------------------------------------------------
> > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> > Report abuse to listadmin@xxxxxxxxxxxxx
> >
> > ------------------------------------------------------
> > List Archives: //www.freelists.org/archives/isalist/
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server Articles and Tutorials:
> > http://www.isaserver.org/articles_tutorials/
> > ISA Server Blogs: http://blogs.isaserver.org/
> > ------------------------------------------------------
> > Visit TechGenix.com for more information about our other sites:
> > http://www.techgenix.com
> > ------------------------------------------------------
> > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> > Report abuse to listadmin@xxxxxxxxxxxxx
> >
> >
> >
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials: 
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx
>
>


--
Brad Mendel
bmendel@xxxxxxxxx
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx 


All mail to and from this domain is GFI-scanned.

------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx

Other related posts: