Quantcast
Channel: Forefront TMG and ISA Server forum
Viewing all articles
Browse latest Browse all 3822

Weird HTTPS issue

$
0
0

Hey Guys,

So I have a remote support appliance I'm trying to publish behind the ISA server we have (2006). I published the appliance as a web-server. It does all its communication over 443. 

The rule works fine when accessing the site from the browser. I get nice logging saying src (external 70.x.x.x) and destination (Ip of INTERNAL SERVER)
Request: Get http://legitmate.site.com/download* - allowed connection

Now once the web browser downloads the client and begins to run the client is trying to access the internal server BUT my logging reports this now -

Denied connection - 12202 The Isa Server denied the specified URL

Src: External

Dest: GET http://192.168.100.59/np

Rule: default 

That 192 address is the address of the weblistener address - that address is natted through my firewall to a public address.

(public address)  <-NAT-> (weblistener) -> (internal server)

                          firewall

I have tried every single access rule I could possibly thing of. No matter what once the client wants to contact that public address the logging changes to the destination of the weblistener and not the internal address like when the rule allows the connection.

Any help would be appreciated. 


Viewing all articles
Browse latest Browse all 3822

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>