Re: ISA 2004 and SSL web publish

From: Thomas W Shinder [MVP] (tshinder_at_hotmail.com)
Date: 07/28/04 

Date: Tue, 27 Jul 2004 21:27:09 -0500

Hi Mike,

Yes, but it doesn't create for a transparent user experience. Without the
split DNS:

1. You loop back through the ISA firewall to access internal resource. That
would like driving from Dallas to Austin via Seattle :) It can be done, but
its not very resource efficient

2. Users have to remember what name to use while on network, and then
remember a different name when off network.

HTH, 

--
Tom
www.isaserver.org/shinder
Get the book!
Tom and Deb Shinder's Configuring ISA Server 2004
http://tinyurl.com/3xqb7
MVP -- ISA Firewalls
"menard" <menard@stanleyaviation.not> wrote in message
news:emBUI0QcEHA.4064@TK2MSFTNGP09.phx.gbl...
: the answer also might be bridging vrs tunneling. that way inside it is
: http://mailserver/exchange which won't require split dns.
:
: mike
:
: "Jim Harrison [MSFT]" <jmharr@online.microsoft.com> wrote in message
: news:ulUWr5abEHA.3944@tk2msftngp13.phx.gbl...
: > Can you connect to this server internally using the exact same URL?
: > Can you connect to this server internally using HTTP?
: > Exactly how is the publishing rule configured?
: >
: > --
: > Jim Harrison [ISASE]
: > Read the help, books and articles!
: >
: > This posting is provided "AS IS" with no warranties, and confers no
: > rights.
: >
: >
: > "Gerard Juárez" <gerardjm@geyma.com> wrote in message
: > news:u51p58VbEHA.1248@TK2MSFTNGP11.phx.gbl...
: > Why only append with SSL page?
: > Why didn's appened when we have Isa 2000?
: >
: >
: > Thanks a lot
: >
: >
: > "Jim Harrison [MSFT]" <jmharr@online.microsoft.com> escribió en el
mensaje
: > news:%23JFCMIObEHA.1548@TK2MSFTNGP12.phx.gbl...
: >> This article may help with your problem:
: >> http://isaserver.org/tutorials/You_Need_to_Create_a_Split_DNS.html
: >>
: >>
: >> --
: >>  Jim Harrison [ISASE]
: >>  Read the help, books and articles!
: >>
: >>  This posting is provided "AS IS" with no warranties, and confers no
: > rights.
: >>
: >>
: >> "Gerard" <gerardjm@geyma.com> wrote in message
: > news:%235ttkbKbEHA.3012@tk2msftngp13.phx.gbl...
: >> Hi, I'm publishing a OWA with SSL, when connect throw external
interface
: >> it's works ok, whr connects throw ISA host it's works perfectly, but
when
: >> connect from internal lan it give me a DNS error
: >>
: >> Help please,
: >>
: >>
: >>
: >
: >
: >
:
:

Relevant Pages

  • Re: OWA and ISA automatically discover
    ... A split DNS is ALWAYS recommended. ... MVP -- ISA Firewalls ... access any website, not just OWA? ... :>: address for the proxy settings in internet explorer. ...
    (microsoft.public.isa)
  • =?iso-8859-1?B?UmU6X1ZlcnL8Y2t0ZV9OYW1lX1Jlc29sdXRpb24hPw==?=
    ... die MAC inzwischen wohl ein Update. ... Supporting ISA Firewall Networks Protecting Illegal Top-level Domains: You Need a Split DNS! ...
    (microsoft.public.de.german.backoffice.smallbiz)
  • DNS Problem
    ... I set up a split DNS on SBS 2003 R2 with ISA 2004. ... have the ISA 2004 client enabled on a workstation I cannot get to ...
    (microsoft.public.isa)
  • Re: Accessing pop3 mail from our relay server.
    ... "Our relay server sits in the dmz protected by firewall-1. ... issues with installing ISA firewall on the relay server in the dmz ...
    (microsoft.public.exchange.setup)
  • Re: HEEEEEEEEEELLLLLLPPPPPP!!!!!!!
    ... Make sure you have a split DNS to support your ISA firewalls. ... your users to loop back through the ISA firewall to access resoruces to ... We have an external firewall appliance and 4 ISA servers within (used as ... we had web publishing rules for>100 websites on one ISA (redirtected from ...
    (microsoft.public.isaserver)
Loading