Web publishing to internal server -- connection always fails
- From: SteveV <StevenVibert@xxxxxxxxxxx>
- Date: Wed, 12 Nov 2008 14:50:25 -0800 (PST)
I have ISA 2006 setup in a 3-leg perimeter config. I'm trying to use
ISA to restrict access to IP cameras installed on a seperate lan
segment and hoping to use web publishing to control access to the
cameras. All of the cameras (Panasonic IP Cameras) have built in web
servers. I have created an "All Open" access rule to confirm that I
can access all of the cameras using IP address and host name.
Next, I disabled the All Open rule and created a web publishing rule
to allow access to one camera. The connection to the camera is being
initiated from our internal network (10.13.1.0). All of the cameras
are on our perimeter network (10.39.1.0).
With the web publishing rule enabled the connection always fails. If
I test my settings using the traffic simulator, the traffic is denied
with the following error:
Denied Traffic - destination URL host name could not be resolved
Rule Name: [Enterprise] Default rule
Looking at the logs, ISA appears to ignore the web publishing rule
which is configured as follows:
Name: Publish CAM130 Web Server
Action: Allow
From: Anywhere
To: CAM130
Listener: IP Camera Listener
Public Name: All requests
Paths: Same as internal
Authentication Delegation: No delegation but the client may
authenticate directly
Users: All Users
Schedule: Always
Link Translation: none
Listener:
Name: IP Camera Listener
Networks: All Networks
Connections: Enable HTTP connections on port 80
Authentication: None
Is the problem that the connection to the web server is originating
from the internal network and thus being ignored? I've been working
on this for days now. I have read a large number of forum posts,
tried an endless number of configurations but have made zero headway--
I would be greatful for any insite.
Thanks -- Steve
.
- Prev by Date: RE: ISA 2004 w/Trend Micro Interscan Viruswall on sbs 2003 R2
- Next by Date: ISA 2006 with Dynamics IP external adapter
- Previous by thread: RE: ISA 2004 w/Trend Micro Interscan Viruswall on sbs 2003 R2
- Next by thread: ISA 2006 with Dynamics IP external adapter
- Index(es):
Relevant Pages
|