Re: Passing HTTP Denying HTTPS



"Will" <westes-usc@xxxxxxxxxxxxxx> wrote in message
news:8eidndrWB93UAXXanZ2dnUVZ_jKdnZ2d@xxxxxxxxxxxxxxx
I have a strange problem I am having a hard time getting through with ISA
2006. I have a rule that looks something like this:

Accept
Protocols: FTP, HTTP, HTTPS
From Local Host
To DNS Name www.vendor.com
To URL http://www.vendor.com
To URL: https://www.vendor.com

Change the DNS name to "vendor.com"
The "www" is the host portion of the name,...it is not the Domain Name. The
Domain Name is just "vendor.com". I forget exactly if wildcards are needed
in Domain Name Sets or not, but if you need that it would be "*.vendor.com"

Remove the URL Sets

When/If the Default Rule denies something to need to examine all the details
of the log entry to see why the traffic did not "match" the rule you
expected it to match. You may have to add Columns to the view to find out.

--
Phillip Windell
www.wandtv.com

The views expressed, are my own and not those of my employer, or Microsoft,
or anyone else associated with me, including my cats.
-----------------------------------------------------
Understanding the ISA 2004 Access Rule Processing
http://www.isaserver.org/articles/ISA2004_AccessRules.html

Troubleshooting Client Authentication on Access Rules in ISA Server 2004
http://download.microsoft.com/download/9/1/8/918ed2d3-71d0-40ed-8e6d-fd6eeb6cfa07/ts_rules.doc

Microsoft Internet Security & Acceleration Server: Partners
http://www.microsoft.com/isaserver/partners/default.mspx

Microsoft ISA Server Partners: Partner Hardware Solutions
http://www.microsoft.com/forefront/edgesecurity/partners/hardwarepartners.mspx
-----------------------------------------------------


.



Relevant Pages

  • Re: ISA 2006 Basic Configuration
    ... Microsoft Internet Security & Acceleration Server: Partners ... Microsoft ISA Server Partners: Partner Hardware Solutions ... Register this connection's addresses in DNS - is this ...
    (microsoft.public.isa.configuration)
  • Re: ISA, Internet Access and Branch Office VPN
    ... The DCwould point to themselves for DNS in thier ... Microsoft Internet Security & Acceleration Server: Partners ... Microsoft ISA Server Partners: Partner Hardware Solutions ...
    (microsoft.public.isa.enterprise)
  • Re: NICs configuration
    ... You're supposed to create an anonymous DNS Rule that allows the DCs to make ... Microsoft Internet Security & Acceleration Server: Partners ... Microsoft ISA Server Partners: Partner Hardware Solutions ...
    (microsoft.public.isa.configuration)
  • Re: ISA 2006 Basic Configuration
    ... DNS is installed on the ... You should use the AD/DNS and allow the AD/DNS to make outbound DNS queries ... Microsoft Internet Security & Acceleration Server: Partners ... Microsoft ISA Server Partners: Partner Hardware Solutions ...
    (microsoft.public.isa.configuration)
  • Re: CEICW fails - several errors
    ... On the WAN NIC of your server the DNS has to point to the LAN IP. ... Ethernet adapter Internet Connection: ... I immediately checked and ISA Server ... Management said that Web Proxy, Firewall and ...
    (microsoft.public.windows.server.sbs)