Re: SharePoint Portal vs. SharePoint services.. not same publishing?

From: Thomas W Shinder [MVP] (tshinder_at_hotmail.com)
Date: 07/28/04

  • Next message: OFF LIMITS: "Probleme bei externen Zugriff auf OWA 2003 hinter ISA 2000 und Pix"
    Date: Tue, 27 Jul 2004 21:29:05 -0500
    
    

    Hi John,

    Use SSL to SSL bridging and it should work fine. SSL to HTTP bridging
    exposes the packets and anybody with a handy network sniffer can find them.
    Doesn't matter if you have an IDS, once I get my trojan in the path between
    the internal interface of the ISA firewall and the Web site, I have access
    to all sorts of 'interesting' stuff ;-)

    HTH,

    --
    Tom
    www.isaserver.org/shinder
    Get the book!
    Tom and Deb Shinder's Configuring ISA Server 2004
    http://tinyurl.com/3xqb7
    MVP -- ISA Firewalls
    "John" <noSPAM@please.net> wrote in message
    news:u$nPy5SaEHA.3756@tk2msftngp13.phx.gbl...
    : I have a SPS working perfectly through ISA using SSL, etc.
    : When I setup WSS exactly the same at another site, I get an error:
    : HTTP Error 403.4 - Forbidden: SSL is required to view this resource.
    : Error also gives me the suggestion to put https:// in front of the
    : address...
    :
    : Problem is... it is over SSL.  The lock is in the bottom IE tray, the
    : address is https:// etc.
    :
    : As I said our SPS is setup the SAME way as this WSS publishing... do they
    : handle this differently?
    :
    : Thanks in advance!!
    : J
    :
    : More info:
    : Both setups are sending HTTP from the ISA to internal IIS.
    : Both are NOT sending original host header info (SPS is working fine like
    : this).
    : SSL is required at the ISA level, not at the IIS level (separate boxes).
    : Yes, SSL's are imported to the incoming ISA connections.
    :
    : Thanks again!
    :
    :
    

  • Next message: OFF LIMITS: "Probleme bei externen Zugriff auf OWA 2003 hinter ISA 2000 und Pix"

    Relevant Pages

    • Re: ISA 2004 Server Errors
      ... Tunneling SSL Through a WWW Proxy ... CONNECT is really a lower-level function than the rest of the HTTP methods, ... Through ISA Server ...
      (microsoft.public.isa)
    • Re: SSL cert in ISA 2006
      ... protocol (HTTP, SMRP, POP3, IMAP, etc.) to provide session-level encryption. ... What is the purpose of SSL used in ISA for? ...
      (microsoft.public.isa.configuration)
    • Re: ADFS, ISA and SSL offloading
      ... I finally enabled logging on the ADFS ... Looking at this made me perform Link Translation in ISA and that's it, ... about it that is different than any normal SSL web app. ... embedded within the HTTP protocol. ...
      (microsoft.public.windows.server.active_directory)
    • Re: ADFS, ISA and SSL offloading
      ... Assuming it is a very short, secure segment between your LB and web server, the risk of running that segment unencrypted is likely be very low but still deserving of caution. ... The other aspect of this is that SSL is not likely to be that big of a deal in terms of absolute performance here, so I'm not sure if you gain much by doing this. ... leave all HTTP on 80 and all SSL on 443. ... ISA is going ...
      (microsoft.public.windows.server.active_directory)
    • Re: ADFS, ISA and SSL offloading
      ... HTTP Application Filter in ISA is a "proxying" filter,...this means that the ... Now this is not unique to ISA ... ISA is extremely picky and is very strick about following all RFCs ... the reason I say to leave the SSL intact from end-to-end and not ...
      (microsoft.public.windows.server.active_directory)

    Loading