Re: sites that call other sites?

No, there isn't.
There's no way to validate the links from a remote site.

--
Jim Harrison (ISA SE)

This posting implies no warranty and confers no rights.
http://catb.org/~esr/faqs/smart-questions.html



"BFH" <BFH@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:6F180D47-A651-4E18-AC4F-049A7CEF5DD0@xxxxxxxxxxxxxxxx
mainly using ISA (2004) as an outgoing proxy. I have access rules that
allow
employees to go to benefit providers' websites- for instance,
wellsfargo.com,
who administer our 401K. However, their website looks like dung through
our
ISA server, because it calls another site (akamai.net) for formatting and
images, and unless I add a rule for that domain, the images are blocked.
But
I don't want to do that for two reasons:

1- it means combing through the source for the sites I'm allowing to look
for other domains so I can allow them
2- when I allow them, it lets users go to other sites they host. Some
enterprising users found other sites fully hosted by akamai.net and can view
them and waste time instead of working.

So, is there a way to write a rule that says "allow traffic to
wellsfargo.com (for example) and to all sites that wellsfargo.com tries to
access?" Thanks,

.

Relevant Pages

  • Re: Logins
    ... This was a slow devolping problem and I wonder as workstations updated that ... > Roger Crawford ... >> Examine the way that the images are called from the page. ... >> are called in the code using a FQDN that isn't listed in the LDT on ISA, ...
    (microsoft.public.isa)
  • sites that call other sites?
    ... mainly using ISA as an outgoing proxy. ... I have access rules that allow ... images, and unless I add a rule for that domain, the images are blocked. ... enterprising users found other sites fully hosted by akamai.net and can view ...
    (microsoft.public.isa.configuration)
  • Re: Logins
    ... have been changing the sites some and I will dig into this more. ... > Examine the way that the images are called from the page. ... > are called in the code using a FQDN that isn't listed in the LDT on ISA, ... > then ISA will think it is out on the Internet and try to process the ...
    (microsoft.public.isa)
  • Re: sites that call other sites?
    ... "Jim Harrison (ISA SE)" wrote: ... images, and unless I add a rule for that domain, the images are blocked. ... enterprising users found other sites fully hosted by akamai.net and can view ...
    (microsoft.public.isa.configuration)
  • Re: allow specific IP full access, bypassing the ISA server
    ... event, ie tamper with the system, door alarm trigger etc then the alarm ... so it is a simple outbound connection via normal Access Rules. ... operating as a SecureNAT Client, instead of a Web Proxy Client or a Firewall ... It is really not possible to by pass a duel-nic ISA ...
    (microsoft.public.isa)
Loading