Re: Exception list problem in internet explorer in the Local Netwo

OK.
But I don't want that the requests to the internal web sites in the local
network go to the ISA proxy. Because I can only see the ISA's IP in the local
web servers' log in this manner. And I can have problems when I have to
shutdown or restart the ISA because
of maintenance.

So, How can I confgure the ISA and firewall Client in this case so that the
internal web requests for the local domain will go to directly the local web
server?

I thank for your help in advance.
Ali Kemal.
Tunca.



"Phillip Windell" wrote:

I use FQDNs all the time for our internal resources and do not have to enter
that in the browser exceptions. Do you have these names properly accounted for
in your Split-DNS setup? Do you have the DNS sccheme of the LAN properly
designed? Everything including the ISA should use only the Internal DNS and
nothing else,...then the internal DNS uses the IP# of the ISP's DNS in the
Forwarders List. Th eISA then anonymously allows the internal DNS to make
outbound DNS Queries.

However I never use GPO for proxy settings it is too rigid and does seem to have
problems like what you are having. I switched to using WPAD with both DNS and
DHCP. I also started putting the Firewall Client on all the Clients except for
those that might have a compelling reason to not do that. Since then I have had
no more problems as those you describe and I do not have to handle "proxy
behavor" at the Clients individually.

--
Phillip Windell
www.wandtv.com

The views expressed, are my own and not those of my employer, or Microsoft, or
anyone else associated with me, including my cats.
-----------------------------------------------------
Understanding the ISA 2004 Access Rule Processing
http://www.isaserver.org/articles/ISA2004_AccessRules.html

Troubleshooting Client Authentication on Access Rules in ISA Server 2004
http://download.microsoft.com/download/9/1/8/918ed2d3-71d0-40ed-8e6d-fd6eeb6cfa07/ts_rules.doc

Microsoft Internet Security & Acceleration Server: Partners
http://www.microsoft.com/isaserver/partners/default.asp

Microsoft ISA Server Partners: Partner Hardware Solutions
http://www.microsoft.com/forefront/edgesecurity/partners/hardwarepartners.mspx
-----------------------------------------------------

"ali kemal" <alikemal@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:BA03C8EA-B75A-4727-8042-F0461C1F597D@xxxxxxxxxxxxxxxx
Hi,

We use the ISA proxy server to go to internet in the local network.
And we use group policy to control the IE settings.
I distribute the some settings for IE by GPO.
For example, I configure IE to use proxy server and I put a check on
"bypass proxy server for local addresses". And I add a few internal web
addresses
with their FQDNs into the exception list in order to bypass the proxy for
local web sites. I must use the exception list, because the option "bypass
proxy server for local addresses" doesn't work when I use the FQDN of the
local web sites.

At the same time, all computers in the local network have ISA firewall
client. And the problem is beginning just here.
Exception list is cleared by the firewall client. So the internal request
goes to the proxy also. If I don't use firewall client , the exception list
stays there
as in the GPO.

Here, I have to use the firewall client and the FQDNs of the internal web
sites.
How can I deal with this issue?
I would be grateful if somebody help me.
Thanks in advance.
Ali Kemal.
Tunca.





.

Relevant Pages

  • Re: Site2Site VPN - Web page requests returns FWX_E_TERMINATING
    ... have?Firewall client or Web proxy clients?If you are using FWC is normal ... to use proxy locally and create an exception for your web site. ... in them,...this causes them to be interpreted by Internet ... Understanding the ISA 2004 Access Rule Processing ...
    (microsoft.public.isa.vpn)
  • RE: 504 Proxy timeout only with SSL traffic
    ... Hi I setup an access rule as you requested and tried it with web proxy off on ... the DMZ network is considered External to the ... And can access all other HTTPS sites on the internet? ... that there may be something wrong with the proxy engine on the ISA, ...
    (microsoft.public.isa)
  • Re: Site2Site VPN - Web page requests returns FWX_E_TERMINATING
    ... The browser has a proxy deny rule to point allow all mab.intra traffic to go ... bypass the proxy within the ISA server. ... them,...this causes them to be interpreted by Internet ... Troubleshooting Client Authentication on Access Rules in ISA Server 2004 ...
    (microsoft.public.isa.vpn)
  • RE: Outlook clinet config for RPC/HTTP
    ... Internet as long as my Proxy referances the DNS name. ... I have looked at the ISA logs, the RPC Proxy server logs ...
    (microsoft.public.exchange.admin)
  • Re: SBS cache SUCKS!!!
    ... > When we use web publishing rule to publish the internal web site, the ISA ... On the ISA Server computer, ... > How to delete the Web cache in Internet Security and Acceleration Server ...
    (microsoft.public.windows.server.sbs)