[THIN] Re: ISA and WI/CSG

  • From: "Russell Robertson" <russell.robertson@xxxxxxxxx>
  • To: <thin@xxxxxxxxxxxxx>
  • Date: Mon, 14 Mar 2005 11:14:07 -0000

The solution for my problem below was to set direct access for both
required servers.

Now I have the final problem of allowing access for clients external to
the ISA server access to the WI/CSG. The WI/CSG is internal to the ISA
server.

I have created a server publishing rule, mapping the ext IP of the ISA
server to the internal IP of the WI/CSG on port 443. It's not working.

I cannot telnet to port 443 on the public IP. Wouldn't I get a
connection if this was open for traffic? I've checked the router and
placed a port redirection rule to direct port 443 traffic from the
public IP to the external IP of ISA.

I'd appreciate any help with this.



-----Original Message-----
From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On
Behalf Of Russell Robertson
Sent: 09 March 2005 15:03
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: ISA and WI/CSG

Yes,  I think even internally, the proxy server is looking for
authentication as the CSG is talking to the STA using port 80. This is
despite the fact that the range these servers is on is excluded in the
IE configuration. I need to see if there is setting within ISA to ask it
leave internal requests alone!

I think the setting for WI is set to auto, I might set it to none and
see if this helps.

-----Original Message-----
From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On
Behalf Of Dogers
Sent: 09 March 2005 11:44
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: ISA and WI/CSG

On Wed, 9 Mar 2005 11:06:52 -0000, Russell Robertson
<russell.robertson@xxxxxxxxx> wrote:

> The firewall client is an interesting one, I should check this. I've 
> tried on a couple of PCs, all without success. The connection seems to

> be going through the proxy server, how can I bypass this? If I stick 
> the IP address of the WI/CSG server in the IE connection settings, how

> do I tell ISA to allow the connection out without touching it?

Assuming your CSG server is on the standard port 443, ISA ought really
not to be fiddling with it - it might be blocking it if its demanding
authentication though, thats where the firewall client would come in.

You might also want to check that your WI isnt set to use the clients
proxy, but I dont think thats the error you're getting..

Andrew
********************************************************
This Weeks Sponsor: RTO Software TScale
TScale provides a cost-effective way to improve performance, capacity
and stability for thin-client servers like Citrix MetaFrame or Microsoft
Terminal Services running Windows NT, 2000 or 2003.
http://www.rtosoft.com/enter.asp?id=296
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
ThinWiki community - Excellent SBC Search Capabilities!
http://www.thinwiki.com
***********************************************************
For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode
use the below link:
http://thin.net/citrixlist.cfm


********************************************************
This Weeks Sponsor: RTO Software TScale
TScale provides a cost-effective way to improve performance, capacity
and stability for thin-client servers like Citrix MetaFrame or Microsoft
Terminal Services running Windows NT, 2000 or 2003.
http://www.rtosoft.com/enter.asp?id)6
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
ThinWiki community - Excellent SBC Search Capabilities!
http://www.thinwiki.com
***********************************************************
For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode
use the below link:
http://thin.net/citrixlist.cfm

********************************************************
This Weeks Sponsor: RTO Software TScale
TScale provides a cost-effective way to improve performance, capacity and 
stability for thin-client servers like Citrix MetaFrame or Microsoft Terminal 
Services running Windows NT, 2000 or 2003.
http://www.rtosoft.com/enter.asp?id)6
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
ThinWiki community - Excellent SBC Search Capabilities!
http://www.thinwiki.com
***********************************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thin.net/citrixlist.cfm

Other related posts: