Re: SSL Tunneling Sharepoint

  • From: "Thomas W Shinder" <tshinder@xxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Wed, 27 Jul 2005 09:53:16 -0500

One thing to keep in mind that SSL tunneling won't work, because you
need to deploy the ISA firewall in full firewall mode for that. You can
so SSL to SSL bridging, though.
 
Tom
www.isaserver.org/shinder <http://www.isaserver.org/shinder> 
Tom and Deb Shinder's Configuring ISA Server 2004
http://tinyurl.com/3xqb7 <http://tinyurl.com/3xqb7> 
MVP -- ISA Firewalls

 


________________________________

        From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx] 
        Sent: Wednesday, July 27, 2005 9:48 AM
        To: [ISAserver.org Discussion List]
        Subject: [isalist] Re: SSL Tunneling Sharepoint
        
        
        http://www.ISAserver.org
        
        It should, but I don't deploy unihomed ISA firewalls so I can't
give you first-hand experience. Split DNS is still key.
         
        Tom
        www.isaserver.org/shinder <http://www.isaserver.org/shinder> 
        Tom and Deb Shinder's Configuring ISA Server 2004
        http://tinyurl.com/3xqb7 <http://tinyurl.com/3xqb7> 
        MVP -- ISA Firewalls

         


________________________________

                From: Alex Gonzalez
[mailto:AGonzalez@xxxxxxxxxxxxxxxxxxx] 
                Sent: Wednesday, July 27, 2005 9:39 AM
                To: [ISAserver.org Discussion List]
                Subject: RE: [isalist] Re: SSL Tunneling Sharepoint
                
                
                Please keep in mind that the ISA server sits in a DMZ
between 2 Checkpoint (sorry) firewalls and is not dual homed to the
internal or external networks.  It's only sitting in the DMZ.  Will this
still work? 
                 

________________________________

                From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx]
                Sent: Wed 7/27/2005 7:38 AM
                To: [ISAserver.org Discussion List]
                Subject: [isalist] Re: SSL Tunneling Sharepoint
                
                

                http://www.ISAserver.org
                
                Hi Mark,
                
                This doesn't sound exactly like a U-turn, but instead
its just that
                hosts on the internal and external networks need to
access the same
                resource on the DMZ. The solution to this (and many
other problems) is a
                split DNS.
                
                Tom
                www.isaserver.org/shinder
                Tom and Deb Shinder's Configuring ISA Server 2004
                http://tinyurl.com/3xqb7
                MVP -- ISA Firewalls
                
                
                
                > -----Original Message-----
                > From: Mark Manna [mailto:m.manna@xxxxxxxxx]
                > Sent: Wednesday, July 27, 2005 6:15 AM
                > To: [ISAserver.org Discussion List]
                > Subject: [isalist] Re: SSL Tunneling Sharepoint
                >
                > http://www.ISAserver.org
                >
                > I don't think that U-Turns are allowed yet in ISA
server.
                >
                > Internal clients will access the sharepoint through
INTERNAL IP
                > External clients will access the sharepoint through
the ISA server or
                > External IP.
                >
                > ------------------------------------------------------
                > List Archives:
http://www.webelists.com/cgi/lyris.pl?enter=isalist
                > ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
                > ISA Server FAQ:
http://www.isaserver.org/pages/larticle.asp?type=FAQ
                > ------------------------------------------------------
                > Visit TechGenix.com for more information about our
other sites:
                > http://www.techgenix.com
                > ------------------------------------------------------
                > You are currently subscribed to this ISAserver.org
Discussion
                > List as: tshinder@xxxxxxxxxxxxxxxxxx
                > To unsubscribe visit
                > http://www.webelists.com/cgi/lyris.pl?enter=isalist
                > Report abuse to listadmin@xxxxxxxxxxxxx
                >
                >
                
                ------------------------------------------------------
                List Archives:
http://www.webelists.com/cgi/lyris.pl?enter=isalist
                ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
                ISA Server FAQ:
http://www.isaserver.org/pages/larticle.asp?type=FAQ
                ------------------------------------------------------
                Visit TechGenix.com for more information about our other
sites:
                http://www.techgenix.com
                ------------------------------------------------------
                You are currently subscribed to this ISAserver.org
Discussion List as: agonzalez@xxxxxxxxxxxxxxxxxxx
                To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
                Report abuse to listadmin@xxxxxxxxxxxxx
                

        ------------------------------------------------------
        List Archives:
http://www.webelists.com/cgi/lyris.pl?enter=isalist
        ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
        ISA Server FAQ:
http://www.isaserver.org/pages/larticle.asp?type=FAQ
        ------------------------------------------------------
        Visit TechGenix.com for more information about our other sites:
        http://www.techgenix.com
        ------------------------------------------------------
        You are currently subscribed to this ISAserver.org Discussion
List as: tshinder@xxxxxxxxxxxxxxxxxx
        To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
        Report abuse to listadmin@xxxxxxxxxxxxx 

Other related posts: