Re: sites that call other sites?



Your words are a knife through my heart.

Oh, well, have a nice weekend.

"Jim Harrison (ISA SE)" wrote:

No, there isn't.
There's no way to validate the links from a remote site.

--
Jim Harrison (ISA SE)

This posting implies no warranty and confers no rights.
http://catb.org/~esr/faqs/smart-questions.html



"BFH" <BFH@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:6F180D47-A651-4E18-AC4F-049A7CEF5DD0@xxxxxxxxxxxxxxxx
mainly using ISA (2004) as an outgoing proxy. I have access rules that
allow
employees to go to benefit providers' websites- for instance,
wellsfargo.com,
who administer our 401K. However, their website looks like dung through
our
ISA server, because it calls another site (akamai.net) for formatting and
images, and unless I add a rule for that domain, the images are blocked.
But
I don't want to do that for two reasons:

1- it means combing through the source for the sites I'm allowing to look
for other domains so I can allow them
2- when I allow them, it lets users go to other sites they host. Some
enterprising users found other sites fully hosted by akamai.net and can view
them and waste time instead of working.

So, is there a way to write a rule that says "allow traffic to
wellsfargo.com (for example) and to all sites that wellsfargo.com tries to
access?" Thanks,

.



Relevant Pages

  • Re: Basic Help Required
    ... -Restarted all ISA services. ... > Jim Harrison ... > Read the help, books and articles! ...
    (microsoft.public.isaserver)
  • Re: Basic Help Required
    ... The ISA server itself is ... > Jim Harrison ... > Read the help, books and articles! ...
    (microsoft.public.isaserver)
  • Re: AD Auth for standalone ISA in DMZ
    ... but a design limitation for outbound authentication. ... Jim Harrison (ISA SE) ... If you want to authenticate internal accounts fro access rules, ...
    (microsoft.public.isa.configuration)
  • Re: Basic Help Required
    ... Policy - IP Packet Filters to allow outbound requests on ... >1 - those settings are for IE, ... > What I was asking about were the ISA Outgoing Web ... > Jim Harrison ...
    (microsoft.public.isaserver)
  • Re: AD Auth for standalone ISA in DMZ
    ... Jim Harrison (ISA SE) ... but when I try to add them to the access rule I get the ... until you change the authentication method of select a different user ...
    (microsoft.public.isa.configuration)

Loading