Solved

Bypass our ISA proxy to access the internet

Posted on 2004-08-19
4
1,153 Views
Last Modified: 2008-03-04
I have a Windows 2000 memeber server running ISA 2004, DSL. All users are scripted to use the ISA as a proxy. I need one of the workstations to be able to access the Internet without using the Proxy in order to authenticate to a secure web site via a static (internal) address but when I disable the proxy the user cant get connected.

Does anyone know how to accomplish this and keep the user within our resources as well?
0
Comment
Question by:bizzie247
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
4 Comments
 
LVL 57

Accepted Solution

by:
Pete Long earned 500 total points
ID: 11846396
Is your Proxy set by Group policy

if so you can open IE tools >internet options >connections >lan settings and untick the proxy settings
I have to do this to do various jobs at work, after a while it will revert back, as your going to a site on your LAN, you may find you need to enable TCP port 8080 as opposed to port 80 to facilitate Proxy access - also in the POLICY select "bypass proxy for local pages" and this problem will dissapear completely :)
0
 

Expert Comment

by:vichus
ID: 11856654
you have to make the server as a secure NAT client, and add an exemption rule in ISA server for this particular server
You can do this by adding a client address set and and a packet filter rule.

0
 
LVL 35

Expert Comment

by:Bembi
ID: 11901367
I'm not quite clear, what is your intension. If you connect to the internet with a private IP address, your address is NATed somewhere, either by ISA or by a router in front of the ISA. Your remote service never can see your private IP, it always sees your public IP address.

If your service authenticated by IP address, your fist need is a static public IP, and this is the IP, you have to authenticate. Whithin ISA, you can then set a rule, that restricts the access to this target only to your machine.

Also have a look at the routing options of ISA, where you can redirect request to an upstream server and to pass through or reestablishing secured requests (like https).
0
 
LVL 57

Expert Comment

by:Pete Long
ID: 12861138
ThanQ
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Sonicwall NSA failover & LB 4 64
penetration testing -- metasploit / etc ? 2 67
Need a command to show the firewall rules for port 3389 8 63
SSH over http/https 8 152
Wikipedia defines 'Script Kiddies' in this informal way: "In hacker culture, a script kiddie, occasionally script bunny, skiddie, script kitty, script-running juvenile (SRJ), or similar, is a derogatory term used to describe those who use scripts or…
The DROP (Spamhaus Don't Route Or Peer List) is a small list of IP address ranges that have been stolen or hijacked from their rightful owners. The DROP list is not a DNS based list.  It is designed to be downloaded as a file, with primary intention…
Although Jacob Bernoulli (1654-1705) has been credited as the creator of "Binomial Distribution Table", Gottfried Leibniz (1646-1716) did his dissertation on the subject in 1666; Leibniz you may recall is the co-inventor of "Calculus" and beat Isaac…
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…

763 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question