ISA Not Allowing Sites by IP



How ISA is Used:
I am using ISA 2006 Standard just a Web Proxy. Within it I have have 2 URL Sets created (Allowed Sites and Blocked Sites). I have 3 tiers of users:
1. Limited -Can only access the sites in the Allowed List
2. Standard - Can Access all sites except the Blocked Sites Lists
3. VIP - Can Access anything.

Issue I am Having:
My Company works with mant clients and we create VPN Tunnel from us to them through our networking equipment and we have to access sites on their network. Some of these sites are set by IP and not a Public Host Name (Example: http://123.45.67.8). What is happening is that if I have that IP in my URL Set "Allow List", no matter of someones tier, the site is being blocked or not resolved and is failing.

If I set my Browser to "By Pass" the Proxy, the site works without problem.

The other part I am notice is if I create and random name in DNS that points the the Failing IP, and then change the IP in the link to the HOST/DNS name I created. The site works.

So what it looks like to me is ISA is trying to resolve IP's as a Host within my internal DNS.

Has anyone see or had this issue and if so what can be down about this.

Thank you,
Michael

.



Relevant Pages

  • Re: ISA firewall rule blocking some sites also blocking DHCP server?
    ... You cannot combine "all protocols" with domain or URL sets. ... 2003 Server Premium with ISA 2004. ... The fix was to Block all outbound EXCEPT DHCP (REQUESTS). ...
    (microsoft.public.isa.configuration)
  • Re: How to Block Gmail
    ... https:// can't be block thru URL Sets ... "Phillip Windell" wrote: ... Understanding the ISA 2004 Access Rule Processing ... SSL) ISA Didn't block the gmail and allow its users to access Gmail ...
    (microsoft.public.isa)
  • Re: Updated ISA_Ads.vbs/xml for 2004 ?
    ... I have created a set of different domain and url sets in xml that I have ... > I found the above vbs and xml while surfing ISA sites. ...
    (microsoft.public.isaserver)
  • Re: URL redirect
    ... [MVP ISA Server] ... "Thomas Stensitzki" schrieb im Newsbeitrag ... > mir erschließt sich das Konzept der URL sets im ISA 2004 nicht so ganz. ...
    (microsoft.public.de.german.isaserver)

Loading