RE: Citrix/ISA

Hi Jack:
Thanks for your reply.

I am glad to hear the information provided is helpful.If you encounter any
difficulties in the future, please submit post to the newsgroup, I am glad
to be of the assistance.

Have a nice day!
Best Regards
Edward Tian(MSFT)
Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| Thread-Topic: Citrix/ISA
| thread-index: AcXOdtXl6KrZzcZvQNyckXtvvJhKng==
| X-WBNR-Posting-Host: 220.234.172.107
| From: "=?Utf-8?B?SmFjaw==?=" <Jack@xxxxxxxxxxxxxxxxxxxxxxxxx>
| References: <BB7DA831-1181-4389-9C4D-5DFBB3C43912@xxxxxxxxxxxxx>
<n0mGi6izFHA.3464@xxxxxxxxxxxxxxxxxxxxx>
| Subject: RE: Citrix/ISA
| Date: Tue, 11 Oct 2005 08:17:04 -0700
| Lines: 134
| Message-ID: <279DA884-E766-4133-8099-3B6C7EC746CE@xxxxxxxxxxxxx>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| Newsgroups: microsoft.public.windows.server.sbs
| NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
| Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
| Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.windows.server.sbs:211990
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| Edward, thank you for the detailed clarification!
|
| "Edward Tian" wrote:
|
| > Hi Jack:
| > Thank you for posting here.
| >
| > Technically, changing HTTP redirector filter to "Send to requested Web
| > server" will not affect your Web proxy functionality. You clients will
work
| > as usual when this filter is disabled. The only difference is that the
| > requests from firewall client and SecureNAT client will not be able to
| > leverage the ISA caching feature. Please let me explain how the HTTP
| > redirector filter works:
| >
| > HTTP redirector filter is used to grab the HTTP/HTTPS/FTP requests from
| > Firewall client and SecureNAT clients and determine the strategy to
handle
| > them. It has the following options:
| >
| > 1. Redirect requests from Firewall and SecureNAT clients to the Web
Proxy
| > service on the local ISA Server computer.
| >
| > In this way, the Web Proxy will handle these requests from the firewall
| > client and SecureNAT client. Please note that the user credential will
LOST
| > in the process of the transfer.
| >
| > 2. Send requests from Firewall and SecureNAT clients directly to the
| > specified Web server. In this case, the request actually bypasses the
Web
| > Proxy service and the requested object will not be cached. This option
has
| > the same effect as the filter is disabled.
| >
| > 3. Discard HTTP requests from Firewall and SecureNAT clients. In other
| > words, even if all other ISA Server rules allow the request, the HTTP
| > redirector filter might reject it. This essentially forces all clients
who
| > want to use HTTP to be set up as Web Proxy clients.
| >
| > One point we need to notice is that this will not affect any requests
from
| > Web proxy service. In other words, if the client configured ISA as
proxy
| > server in Internet Explorer, the requests sent by IE will not be
processed
| > by HTTP redirector filter.
| >
| > As a conclusion, disabling this filter will not disable Web proxy for
any
| > clients or applications. The clients and applications can use Web proxy
| > directly without going through this filter by being configured as Web
proxy
| > client. Also, for the applications do not have proxy to configure,
| > disabling this filter will enable firewall client and firewall service
to
| > serve all these requests automatically.
| >
| > For more information, please refer to the following articles:
| >
| > HTTP Redirector Filter
| >
http://www.microsoft.com/resources/documentation/isa/2000/enterprise/proddoc
| > s/en-us/isadocs/cmt_httpfilter.mspx
| >
| > 310129 HOW TO: Configure the ISA Server 2000 HTTP Redirector Filter in
| > Windows
| > http://support.microsoft.com/?id=310129
| >
| > Hope the above information helps. If anything is unclear or you have
| > further questions, please feel free to let me know. I look forward to
| > hearing from you.
| >
| > Enjoy your day! :)
| >
| > Best Regards
| > Edward Tian(MSFT)
| > Microsoft CSS Online Newsgroup Support
| >
| > Get Secure! - www.microsoft.com/security
| > ======================================================
| > This newsgroup only focuses on SBS technical issues. If you have issues
| > regarding other Microsoft products, you'd better post in the
corresponding
| > newsgroups so that they can be resolved in an efficient and timely
manner.
| > You can locate the newsgroup here:
| > http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
| >
| > When opening a new thread via the web interface, we recommend you check
the
| > "Notify me of replies" box to receive e-mail notifications when there
are
| > any updates in your thread. When responding to posts via your
newsreader,
| > please "Reply to Group" so that others may learn and benefit from your
| > issue.
| >
| > Microsoft engineers can only focus on one issue per thread. Although we
| > provide other information for your reference, we recommend you post
| > different incidents in different threads to keep the thread clean. In
doing
| > so, it will ensure your issues are resolved in a timely manner.
| >
| > For urgent issues, you may want to contact Microsoft CSS directly.
Please
| > check http://support.microsoft.com for regional support phone numbers.
| >
| > Any input or comments in this thread are highly appreciated.
| > ======================================================
| > This posting is provided "AS IS" with no warranties, and confers no
rights.
| >
| > --------------------
| > | Thread-Topic: Citrix/ISA
| > | thread-index: AcXNm+w6VLjR/tKOSFCHCi743UH/eQ==
| > | X-WBNR-Posting-Host: 220.234.172.107
| > | From: "=?Utf-8?B?SmFjaw==?=" <Jack@xxxxxxxxxxxxxxxxxxxxxxxxx>
| > | Subject: Citrix/ISA
| > | Date: Mon, 10 Oct 2005 06:10:01 -0700
| > | Lines: 13
| > | Message-ID: <BB7DA831-1181-4389-9C4D-5DFBB3C43912@xxxxxxxxxxxxx>
| > | MIME-Version: 1.0
| > | Content-Type: text/plain;
| > | charset="Utf-8"
| > | Content-Transfer-Encoding: 7bit
| > | X-Newsreader: Microsoft CDO for Windows 2000
| > | Content-Class: urn:content-classes:message
| > | Importance: normal
| > | Priority: normal
| > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| > | Newsgroups: microsoft.public.windows.server.sbs
| > | NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
| > | Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA03.phx.gbl
| > | Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.windows.server.sbs:211688
| > | X-Tomcat-NG: microsoft.public.windows.server.sbs
| > |
| > | Our client has an application that uses a Citrix client to access a
| > server
| > | elsewhere. I can get this application to work only if I do both of
these
| > | things:
| > | 1. add a protocol rule for the predefined ISA protocol;
| > | 2. change the HTTP redirector option from "Redirect to local Web
Proxy
| > | service" to
| > | "Send to Requested Web server".
| > |
| > | Can I assume that all the traffic doesn't go through the web proxy?
Am I
| > | loosing the Cache benefit?
| > |
| > | Thank you.
| > | Jack
| > |
| >
| >
|

.

Relevant Pages

  • RE: Citrix/ISA
    ... changing HTTP redirector filter to "Send to requested Web ... requests from firewall client and SecureNAT client will not be able to ... HTTP redirector filter is used to grab the HTTP/HTTPS/FTP requests from ... Redirect requests from Firewall and SecureNAT clients to the Web Proxy ...
    (microsoft.public.windows.server.sbs)
  • RE: Citrix/ISA
    ... changing HTTP redirector filter to "Send to requested Web ... > requests from firewall client and SecureNAT client will not be able to ... > HTTP redirector filter is used to grab the HTTP/HTTPS/FTP requests from ... Redirect requests from Firewall and SecureNAT clients to the Web Proxy ...
    (microsoft.public.windows.server.sbs)
  • Re: Kerberos with Windows Integrated authentication
    ... I was simply pointing out that the newsgroup is accessible by going through the Web ady. ... Requests for assistance by email can not and will not be acknowledged. ... And his issue with Kerberos belongs there in the server.security group ... > Domain controller, IIS, Client. ...
    (microsoft.public.security)
  • RE: Connect Computer and VPN
    ... The RPC filter that we disabled can be enabled (if required for other ... Try to telnet 80 port from client to SBS, ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • COM Interop + Threading + Scalability
    ... The Client completely denies ... The Rules Processor is implemented in VB 6 and the ASP.NET ... multiple concurrent requests for the Rules Processor. ... creates and initializes an apartment when calling a COM ...
    (microsoft.public.dotnet.framework.interop)
Loading