We've recently installed two new ISA 2006 servers to replace our aging 2000 servers. Everything seems to be fine with one exception. We have some internal websites that are not working on our Web Proxy Clients. It would appear that Firewall and SecureNAT clients are fine. At first I thought this was a DNS issue, and then an authentication issue, but it is actually neither of those. The problem explicitly manifests itself when we use the FQDN of internal servers only. Let's assume that we have a web page hosted at SVR1.mydomain.com and that server is LOCAL on my domain. If I simply put in my IE URL:
http://SVR1 then everything is fine. However, if I put in
http://SVR1.mydomain.com, I get error code 502 (12202) returned to me. In doing some research last night, I looked in the help file of the SDK and read that, paraphrasing, if you put dots into your URL you are telling the ISA server to use the Web Proxy. If you DON'T put dots, you are telling the ISA server the address is local.
I have verified that it isn't DNS or Authentication by going into the properties of the Proxy Settings on IE and adding "SVR1.mydomain.com" into the "Do not use proxy server for addresses beginning with:" section and everything works PERFECTLY. The problem is that we have about 20 of these internal sites and I'd rather not put all 20 of those sites in that exception list.
So, the question is, how do I best get the desired result of having internal sites NOT go through the Web Proxy? The flip side of this is that I COULD put *.mydomain.com in the exclusions field, but we actually have "
www.mydomain.com" hosted on the real world, external, website that our users need to get to. Is there a way to force that ONE site TO use the web proxy client?
I'm hoping there is a trick somewhere in the Network Settings to allow me to get my desired results, but I'm not aware of anything. Your help in this matter is greatly appreciated!
Start Free Trial
