sites that call other sites?

mainly using ISA (2004) as an outgoing proxy. I have access rules that allow
employees to go to benefit providers' websites- for instance, wellsfargo.com,
who administer our 401K. However, their website looks like dung through our
ISA server, because it calls another site (akamai.net) for formatting and
images, and unless I add a rule for that domain, the images are blocked. But
I don't want to do that for two reasons:

1- it means combing through the source for the sites I'm allowing to look
for other domains so I can allow them
2- when I allow them, it lets users go to other sites they host. Some
enterprising users found other sites fully hosted by akamai.net and can view
them and waste time instead of working.

So, is there a way to write a rule that says "allow traffic to
wellsfargo.com (for example) and to all sites that wellsfargo.com tries to
access?" Thanks,
.

Relevant Pages

  • Re: sites that call other sites?
    ... Jim Harrison (ISA SE) ... I have access rules that ... images, and unless I add a rule for that domain, the images are blocked. ... enterprising users found other sites fully hosted by akamai.net and can view ...
    (microsoft.public.isa.configuration)
  • Re: sites that call other sites?
    ... "Jim Harrison (ISA SE)" wrote: ... images, and unless I add a rule for that domain, the images are blocked. ... enterprising users found other sites fully hosted by akamai.net and can view ...
    (microsoft.public.isa.configuration)
  • Re: allow specific IP full access, bypassing the ISA server
    ... event, ie tamper with the system, door alarm trigger etc then the alarm ... so it is a simple outbound connection via normal Access Rules. ... operating as a SecureNAT Client, instead of a Web Proxy Client or a Firewall ... It is really not possible to by pass a duel-nic ISA ...
    (microsoft.public.isa)
  • Re: AD Auth for standalone ISA in DMZ
    ... but a design limitation for outbound authentication. ... Jim Harrison (ISA SE) ... If you want to authenticate internal accounts fro access rules, ...
    (microsoft.public.isa.configuration)
  • Re: VPN and access control
    ... the reel problem is with the TSE licence and when a VPN acces is come in, ... It can be very detailed in the Access Rules. ... Understanding the ISA 2004 Access Rule Processing ... Microsoft Internet Security & Acceleration Server: ...
    (microsoft.public.windows.server.networking)
Loading