Im dont want to give them access to internal resorces
Im looking to just manage there Site surfing in IE
with this proxy just like they are internal users
Main Topics
Browse All TopicsIve got all internal clients forwording to ISA 2004 then to the domains-web pages I want them to have access to
now I need to figure out how to connect my stores to this proxy
all store are external small networks with 4 or 5 machines
some have static ip and some don't
how can I get the proxy to allow external clients
I have my router already forwarded to the proxy and i can see the session in monitoring but it does not forword
to the domains I have set up!!
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.

Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
Some key points here.
1. ISA is not a router, regardless of what it says in the manual so this element needs to be dealt with by the routers themselves.
2. Are you running VPN's from your stores to your main office where the ISA is located? If so, what type of VPN are you using pptp or ipsec?
3. again, if yes, Have you created the VPN locations (in the VPN sections and enabled the client access list/rules?
4. What are you actually seeing in the monitoring - logging section?
I have one machine in each location that uses the windows VPN (pptp)
there are 3 or 4 machines that dont have vpn connections they just connect directly to the internet
the vpn connections are made with a cisco 3030 vpn concentrator
what I see in the monitoring session is a connection with external marked on it and a ip address of the client that is connecting and I have verified that it is my address
basically the idea here is it will be kind of a public proxy in a sense
not sure how safe it is or if it can even be done just testing everything at the moment
the only other option I have is to set up internet connection sharing with the VPN connection then I should be able to
route through the proxy
Internet
|
external Router
|
switch
| |
--------------- ---------------
| |
x.y.19.1 x.y.19.2
Cisco 3020 ext firewall
| |
(dmz interface) ------------- ISA server -------- (external Interface)
|
|
--------------- LAN --------------------------
External users call in on the vpn concentrator. Put a rule on ISA server that allows traffic from the DMZ (perimeter) to external and control as required.
Business Accounts
Answer for Membership
by: TannerManPosted on 2006-03-30 at 08:53:11ID: 16334244
Not sure I am following your intent here.
Are you wanting to allow your External (Internet connected) Branch Locations access to your private network located behind your ISA 2004 server?
You will need to setup either client to ISA vpn connections or Site to Site VPN connections.
Please clarify your needs and myself, or someone else on here may be able to get you in the right direction.