?
Solved

Do not proxy sites and services

Posted on 2010-04-06
10
Medium Priority
?
347 Views
Last Modified: 2012-05-09
Microsoft ISA 2006 and Web Proxy.

Hello,

I have a MS ISA 2006 server as a Web proxy server in my network.

How do I setup some of the traffic on my network to bypass the proxy server, or that some sites (like my intranet) traffic to not be proxied at all?

I use the private range for all my servers and workstations (192.168.0.0 255.255.0.0) and I have a couple of external services that I would like to bypass my ISA server. This traffic must not be proxied.

I'm trying to use the wpad.dat file solution, but I'm not having much luck there.  
Where do I set the settings in ISA to NOT proxy some traffic and to allow it to go directly?

Thanks.

Ampletrix

0
Comment
Question by:Ampletrix
  • 5
  • 5
10 Comments
 
LVL 2

Expert Comment

by:spogs
ID: 29972118
This is setup on the client side.

Internet Options -> Connections -> Lan Settings -> Use Proxy Server Advanced -> At the bottom - Do not use Proxy server for addresses beginning with ...


Do you need to push this centrally?  Do you have an AD environment?
0
 

Author Comment

by:Ampletrix
ID: 29976985
Hello spogs,

Yes I have AD with on Windows Server 2003.

My biggest problem is to get some traffic to bypass the proxy. Some of these sites are not internal traffic, but still used for applications. My ISA server is only ISA std edition, and I have over 800 users.

So, I'd like to bypass the server as much as possible.
I already have the internet connection settings setup for all the users via group policy.

I'm thinking of using WPAD files for the traffic, but when I create it, it explicitly tellms me not to modify it.

For example - I have an application that usesses an external address of 147.89.213.45 - 147.89.213.50 and I don't want any of the traffic to go through my proxy.

Then I also need to keep notebook users in mind when they go off site.

Thanks.

Ampletrix.
0
 
LVL 2

Expert Comment

by:spogs
ID: 29977423
So when you add the 147.89.213.45 - 147.89.213.50 range to the exclusions in the connection settings it doesn't work?

Anything in the do not use area would not go through your proxy.


I must be missing something.



When the notebook users go offsite they would have to turn the proxy off of course.
0
Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

 

Author Comment

by:Ampletrix
ID: 29977945
Where exactly is the exclusions settings?
0
 
LVL 2

Accepted Solution

by:
spogs earned 2000 total points
ID: 29978519
Here... see attached img.
screen-capture.png
0
 

Author Comment

by:Ampletrix
ID: 29978795
Thank you. The problem is that I still have some IE6 clients, and I have loads of applications in there already.
I was hoping there might be something in ISA server itself to allow traffic to go through without being proxied.

I have read a couple of articles about WPAD.Dat configurations, but I'm not entirely sure that is what I'm looking for.
So - Without the solution above, Is there anyway I can do get the configuration in ISA to allow traffic to bypass or to not be proxied?

Thanks.
0
 
LVL 2

Expert Comment

by:spogs
ID: 29978946
Off the top of my head... not sure... But I thought that option is also available in IE6 and you may be able to push that via a GPO also so you don't have to touch the clients.
0
 

Author Comment

by:Ampletrix
ID: 29983816
Thanks - This sounds pretty much what I'd do then.
Just a couple of questions - Is there a limit of the number of entries that I can put into the "bypass" box?
Can I pipe entries in there - for example ip ranges instead of having to add individual entries?


If you know perhaps - Is there a diference between these entries in IE6 and in IE8 - I'm planning an upgrade.

Thanks again.
Ampletrix
0
 
LVL 2

Expert Comment

by:spogs
ID: 30017409
Not sure about any of those factors.  A quick google might give you that answer.  Your going to need to reference google for the right GPO entry too since I dont know that off the top of my head either.

Good luck!

There should be no difference between IE6 and IE8
0
 

Author Closing Comment

by:Ampletrix
ID: 31711644
Thanks
0

Featured Post

Upgrade your Question Security!

Your question, your audience. Choose who sees your identity—and your question—with question security.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Microsoft's ISA Server has been its pre-eminent security product for about a decade and is still regarded amongst the well-informed as one of the best software firewalls and application gateways ever released, by any manufacturer. ISA Server has bee…
So the following errors occurs in 2 ways that I am aware of at this stage, and you receive one of the following error messages: ERROR 1. When trying to save a rule: No Web listener is specified for the Web publishing rule Autodiscovery Publishin…
Planning to migrate your EDB file(s) to a new or an existing Outlook PST file? This video will guide you how to convert EDB file(s) to PST. Besides this, it also describes, how one can easily search any item(s) from multiple folders or mailboxes…
Watch the video to learn how one can deal with PST file corruption issue with an outstanding Kernel for Outlook PST Repair Tool easily. Using this tool, non-technical users can swiftly perform the repair process to restore their essential data witho…
Suggested Courses

601 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question