One thing to keep in mind that SSL tunneling won't work, because you need to deploy the ISA firewall in full firewall mode for that. You can so SSL to SSL bridging, though. Tom www.isaserver.org/shinder <http://www.isaserver.org/shinder> Tom and Deb Shinder's Configuring ISA Server 2004 http://tinyurl.com/3xqb7 <http://tinyurl.com/3xqb7> MVP -- ISA Firewalls ________________________________ From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx] Sent: Wednesday, July 27, 2005 9:48 AM To: [ISAserver.org Discussion List] Subject: [isalist] Re: SSL Tunneling Sharepoint http://www.ISAserver.org It should, but I don't deploy unihomed ISA firewalls so I can't give you first-hand experience. Split DNS is still key. Tom www.isaserver.org/shinder <http://www.isaserver.org/shinder> Tom and Deb Shinder's Configuring ISA Server 2004 http://tinyurl.com/3xqb7 <http://tinyurl.com/3xqb7> MVP -- ISA Firewalls ________________________________ From: Alex Gonzalez [mailto:AGonzalez@xxxxxxxxxxxxxxxxxxx] Sent: Wednesday, July 27, 2005 9:39 AM To: [ISAserver.org Discussion List] Subject: RE: [isalist] Re: SSL Tunneling Sharepoint Please keep in mind that the ISA server sits in a DMZ between 2 Checkpoint (sorry) firewalls and is not dual homed to the internal or external networks. It's only sitting in the DMZ. Will this still work? ________________________________ From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx] Sent: Wed 7/27/2005 7:38 AM To: [ISAserver.org Discussion List] Subject: [isalist] Re: SSL Tunneling Sharepoint http://www.ISAserver.org Hi Mark, This doesn't sound exactly like a U-turn, but instead its just that hosts on the internal and external networks need to access the same resource on the DMZ. The solution to this (and many other problems) is a split DNS. Tom www.isaserver.org/shinder Tom and Deb Shinder's Configuring ISA Server 2004 http://tinyurl.com/3xqb7 MVP -- ISA Firewalls > -----Original Message----- > From: Mark Manna [mailto:m.manna@xxxxxxxxx] > Sent: Wednesday, July 27, 2005 6:15 AM > To: [ISAserver.org Discussion List] > Subject: [isalist] Re: SSL Tunneling Sharepoint > > http://www.ISAserver.org > > I don't think that U-Turns are allowed yet in ISA server. > > Internal clients will access the sharepoint through INTERNAL IP > External clients will access the sharepoint through the ISA server or > External IP. > > ------------------------------------------------------ > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ > ------------------------------------------------------ > Visit TechGenix.com for more information about our other sites: > http://www.techgenix.com > ------------------------------------------------------ > You are currently subscribed to this ISAserver.org Discussion > List as: tshinder@xxxxxxxxxxxxxxxxxx > To unsubscribe visit > http://www.webelists.com/cgi/lyris.pl?enter=isalist > Report abuse to listadmin@xxxxxxxxxxxxx > > ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: agonzalez@xxxxxxxxxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx