Solved

Configuring Microsoft ISA 2006 Web Proxy to use port 80 instead of 8080

Posted on 2007-11-29
12
9,195 Views
Last Modified: 2011-08-18
I would to like to configure my MS ISA 2006 web proxy to port 80 instead of the default port of 8080. I have changed the port number to 80 in the Web proxy tab on my Internal Networks and clicked Apply.  If I then change the proxy address on IE on a client machine from port 8080 to 80, then IE doesn't work. Am I missing a step?
0
Comment
Question by:mandalj
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 6
  • 6
12 Comments
 
LVL 51

Expert Comment

by:Keith Alabaster
ID: 20375329
Open the ISA gui
Select configuration - networks - internal - properties - select the web proxy tab
Change the port from the default 8080 to 80.

Save the policy
Amend your ie browsers proxy settings to use port 80

That should be it - no you are not missing a step
0
 
LVL 51

Expert Comment

by:Keith Alabaster
ID: 20375345
What happens after the change? What error?

Open the isa gui - select monitoring - logging - click start query. What meesages do you get in the log?
0
 

Author Comment

by:mandalj
ID: 20375647
The Monitoring shows that port 80 is being denied by the default policy
0
Visualize your virtual and backup environments

Create well-organized and polished visualizations of your virtual and backup environments when planning VMware vSphere, Microsoft Hyper-V or Veeam deployments. It helps you to gain better visibility and valuable business insights.

 

Author Comment

by:mandalj
ID: 20375665
There are no errors, the web page of the URL is not displayed
0
 

Author Comment

by:mandalj
ID: 20375932
If I change the web proxy to any other port setting say 85, then it works. Websense Enterprise is configured to monitor content on another machine. Is there a rule ordering issue?
0
 
LVL 51

Expert Comment

by:Keith Alabaster
ID: 20376340
1 of 2 things then.

First, ISA does not believe that port 80 traffic is allowed to pass from the internal & local host to external?
second, are you running IIS on the ISA server itself?

No, there is not a rule issue on this - if there was  then the other ports would not operate either that you set the proxy to. Also, the denied message would give a rule name in the list, it would not have dropped down to the default rule at the bottom.

Make sure you have .net 1.1 on the ISA box
Run up the ISA bpa
http://www.microsoft.com/downloads/details.aspx?FamilyId=D22EC2B9-4CD3-4BB6-91EC-0829E5F84063&displaylang=en


0
 

Author Comment

by:mandalj
ID: 20376687
Yes, I run IIS, do I need to change the default web site port, it is currently 80?

And I have run ISA Bpa - 1 critical error - The External network is used in single network card sceniro.
0
 
LVL 51

Expert Comment

by:Keith Alabaster
ID: 20376711
That should be OK assuning you used the single nic network template wizard when you installed ISA.

It seems the issue you have is that ISA is already using port 80 (for the IIS service) therefore it cannot use this for the web proxy service also. In theory it should be OK but in practice i have seen it once or twice before causing problems.
Yes, I would put it back to 8080, the default.

Keith
0
 

Author Comment

by:mandalj
ID: 20376931
I amended the IIS Default Web site port to  85 and then changed the web proxy to 80 and it seems to work - is a viable solution?
0
 
LVL 51

Accepted Solution

by:
Keith Alabaster earned 250 total points
ID: 20377405
That would be fine - it is the same thing really as you have moved the service on the ISA server to another port, thereby freeing up port 80 but it begs the bquestion of why do you have IIS on the ISA server anyway? ISA does not need it.
0
 

Author Comment

by:mandalj
ID: 20378157
Thanks, I will raise the question with guy who installed it.  Many thanks for all your help.
0
 
LVL 51

Expert Comment

by:Keith Alabaster
ID: 20378173
Welcome :)
0

Featured Post

Connect further...control easier

With the ATEN CE624, you can now enjoy a high-quality visual experience powered by HDBaseT technology and the convenience of a single Cat6 cable to transmit uncompressed video with zero latency and multi-streaming for dual-view applications where remote access is required.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

The Need In an Active Directory enviroment, the PDC emulator provide time synchronization for the domain. This is important since Active Directory uses Kerberos for authentication.  By default, if the time difference between systems is off by more …
I'm a big fan of Windows' offline folder caching and have used it on my laptops for over a decade.  One thing I don't like about it, however, is how difficult Microsoft has made it for the cache to be moved out of the Windows folder.  Here's how to …
Nobody understands Phishing better than an anti-spam company. That’s why we are providing Phishing Awareness Training to our customers. According to a report by Verizon, only 3% of targeted users report malicious emails to management. With compan…
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit https://www.mail-signatures.com/articles/signature-templates/?sts=6651 If you want to manage em…

738 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question