Re: reverse web proxy

Well if that is true, if I were to have an internal subnet that's route path
went through my inner firewall, the inner firewall sent it to my ISA
published server (I don't know if this can even be routed this way but don't
see why not) and that was then routed out to the external firewall. Is that
something that is feasible or just complexity with problems waiting to
happen.

I am no FW expert or claim to understand things that well so please
understand this.

I'm not getting out of the quick sand as quickly as I had hoped.

--

Paul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA
http://www.pbbergs.com

This posting is provided "AS IS" with no warranties, and confers no rights.

"Phillip Windell" <@.> wrote in message
news:uBiMvzgPGHA.3936@xxxxxxxxxxxxxxxxxxxxxxx
"Paul Bergson" <pbergson@xxxxxxxxxx> wrote in message
news:O4FPpZaPGHA.532@xxxxxxxxxxxxxxxxxxxxxxx
It isn't as bad as you are interpreting it.

Ok. But the little rant was fun anyway....

Why a firewall between the two shouldn't matter, it is only
communication.
I could stick 20 firewalls back to back to back and as long as the routes
and policies are setup they will all work.

Technically that is true. But there are very few who could keep it all
straight and properly maintained over time. It is way too much complexity
that doesn't have a real purpose to exist.

The way the reverse web proxy
works it has to have the published servers define their gatewqay as the
ISA

ISA does not have to be the Default Gateway,...it only has to be in the
"routing path". It would only be used as a host's Default Gateway if the
internal LAN next to the ISA was only a single subnet.

--
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com
-----------------------------------------------------
Understanding the ISA 2004 Access Rule Processing
http://www.isaserver.org/articles/ISA2004_AccessRules.html

Troubleshooting Client Authentication on Access Rules in ISA Server 2004
http://download.microsoft.com/download/9/1/8/918ed2d3-71d0-40ed-8e6d-fd6eeb6cfa07/ts_rules.doc

Microsoft Internet Security & Acceleration Server: Guidance
http://www.microsoft.com/isaserver/techinfo/Guidance/2004.asp
http://www.microsoft.com/isaserver/techinfo/Guidance/2000.asp

Microsoft Internet Security & Acceleration Server: Partners
http://www.microsoft.com/isaserver/partners/default.asp

Deployment Guidelines for ISA Server 2004 Enterprise Edition
http://www.microsoft.com/technet/prodtechnol/isa/2004/deploy/dgisaserver.mspx
-----------------------------------------------------





.

Relevant Pages

  • Re: The Web site cannot be found - errors
    ... problems connecting with the internet. ... Internet Connection Wizard from the server. ... > files and ISA cache on all ...
    (microsoft.public.windows.server.sbs)
  • RE: Internet Usage Reports
    ... There is no other application on the SBS server box that can monitor ... internet activities as your needs rather than ISA server. ... Microsoft Internet Security and Acceleration Server 2004 is the ... Microsoft is providing this information as a convenience to you. ...
    (microsoft.public.windows.server.sbs)
  • RE: ISA 2004 Rules
    ... internet website from the ISA server itself. ... All Users or SBS Internet Users ... Then can you access this problematic page from the workstation side this ...
    (microsoft.public.windows.server.sbs)
  • Re: Connect the SBS to a remote IIS for Internet Printing
    ... the server can access the Internet with no problems at all. ... Checking network connection, and after a few seconds it says The ... the problem is cause by the configuration of ISA. ...
    (microsoft.public.windows.server.sbs)
  • Re: Internet slow after SBS 2003 SP1 install
    ... you may found the root cause since DNS server is response to name ... resolution and help find destination site when you access internet. ... Microsoft CSS Online Newsgroup Support ... >> To enable ISA log: ...
    (microsoft.public.windows.server.sbs)