RE: Certificate

Can the ISA (version 2006) firewall inspect traffic inside an SSL tunnel ???

Thanks,
--
Tom


"Shijaz" wrote:

The certificate should be imported to the "Personal" certificate store, not
the "trusted root certificates" store..

See this article, its helpful and provides step by step info:

Digital certificates for ISA 2004
http://www.microsoft.com/technet/prodtechnol/isa/2004/plan/digitalcertificates.mspx

If your importing a commercial certificate tht you purchased, see the
section Certificates from a Commercial Certification Authority Procedure 5.


--
Shijaz Abdulla
MCSE:Security, CCNA
www.shijaz.com/isaserver


"Tom" wrote:

Ok, thanks for the information.
Now, i have a certificate and i used mmc snap-in to install it.
Now it is in "trusted root certification authorities" ... but when try to
select it via the ISA console using a "web listener" for https, i disable
http & select https for port 443 ... problem is: when i want to select the
certificate i get "there are no certificates configured on this server" ...
what is the problem here?

--
Tom


"Shijaz" wrote:

You can import the SSL certificate (*.CER file) into the machine running ISA
by using the 'certificates' MMC snap-in on the local computer.

As Philip said, you shouldn't install IIS on the machine running ISA server
if your not running Small Business Server.


--
Shijaz Abdulla
MCSE:Security, CCNA
www.shijaz.com/isaserver


"Tom" wrote:

Hi,
Is it possible to create a certificate for ISA 2004 to be able to use ssl
without having to install IIS.
Thanks,
Tom
.

Relevant Pages

  • RE: L2TP/IPSEC site-to-site question
    ... seems more difficult on Windows and Isa 2000 mix, ... If I want to use certificates what type I have to use? ... > site-to-site VPN connection. ... > Site-to-Site VPN in ISA Server 2004 ...
    (microsoft.public.isa)
  • RE: L2TP/IPSEC site-to-site question
    ... Microsoft Internet Security and Acceleration (ISA) Server 2004 ... >site-to-site vpn connection. ... >My concerns are about the certificates part. ...
    (microsoft.public.isa)
  • RE: L2TP/IPSEC site-to-site question
    ... Microsoft CSS Online Newsgroup Support ... The public newsgroup only focuses on ISA related technical issues, ... When opening a new thread via the web interface, we recommend you check the ... >If I want to use certificates what type I have to use? ...
    (microsoft.public.isa)
  • Re: Yipee, got the ISA Purchase Approved, now I need to work out certificates
    ... ISA 2004+ supports wildcard certificates at the upstream server. ... Publishing Multiple Web Sites using a Wildcard Certificate in ISA Server ...
    (microsoft.public.isa)
  • Re: Unable to redirect requests to SSL port in ISA
    ... here is a way we can see wether or not the private keys are on the isa ... If you start the Certificates plugin, for the Local machine, you say you can ... Where did you get the cert that you want to use on the ISA Server? ... there is a tickbox for "Export this cert with the Private Key" ...
    (microsoft.public.isa)
Loading